How to Set Password Policy so Okta User Password Does Not Expire
Oct 8, 2025
Administration
Okta Classic Engine
Okta Identity Engine
Overview
This article discusses how to set the password policy so that the Okta user password does not expire.
Applies To
- Okta-mastered users
- Password policy
Solution
For Okta Classic tenants, please follow the steps below:
-
In the Okta Admin Console, navigate to Security > Authentication.
-
In the left pane, click the password policy that is being applied to the user.
-
Ensure Password age - Password expires after X days is unchecked.
- At the bottom of the page, if a new rule was added, ensure the User's IP setting is Anywhere, or select In Zone > All zones the user will be logging from.
For Okta Identity Engine tenants, please follow the steps below:
-
In the Okta Admin Console, navigate to Security > Authenticators.
-
Click on Actions > Edit under the Password section.
- Go to Password age > Password expires after X days is unchecked.
- At the bottom of the page, if a new rule was added, ensure the User's IP setting is Anywhere, or select In Zone > All zones the user will be logging from.
