Password expires every 90 days. After 83 days (7 days from the expiry) the user will be notified via email to change the password. If the user does not change the password, after 90 days, MeRLIN will not let the user login using the current password and force the user to change password at the next login.