Password security your auditors will actually trust
Layer configurable complexity, expiry, history and forced-change enforcement onto Odoo's native password policy, then prove it happened with an exportable compliance report and a full audit trail.
The problem
IT admins and security officers cannot guarantee that every Odoo user's password meets a minimum bar, cannot see who is about to expire, and cannot prove enforcement during a SOC 2, ISO 27001 or HIPAA audit. Odoo's native policy only checks length at signup. Cheap single-feature apps cover expiry or strength alone and now largely duplicate what is already built in. Expensive credential vaults store secrets but never govern the lifecycle of a user's own login password — leaving a compliance gap no single tool closes.
The solution
Advanced Password Protection Policy is a complete lifecycle engine: configurable complexity and per-group policy templates, expiry with a grace window, password history, and forced-change workflows — plus proactive email and in-app reminders long before a deadline arrives. Every login attempt and policy change is logged, and a compliance dashboard with an exportable PDF report gives admins auditor-ready evidence in one place.
Everything a compliance policy needs
Every capability below is implemented in the module.
Configurable Complexity Rules
Set minimum length plus uppercase, lowercase, digit and special-character requirements, layered on top of Odoo's native password policy.
Per-Group Policy Templates
Assign stricter, reusable policy templates to finance or IT and lighter ones to general staff, with priority ordering and a fallback default.
Expiry With a Grace Window
Passwords expire on a configurable schedule, with a soft grace period before a hard login block — no more abrupt lockout tickets.
Password History & Reuse Prevention
Block reuse of the last N passwords per policy, so rotation cannot be defeated by cycling back to an old password.
Forced Change Workflow
A non-bypassable forced-change page blocks further use of Odoo until an expired or admin-flagged user sets a compliant password.
Live Strength Meter & Generator
The change screen shows a live strength meter and requirement checklist, plus a one-click generator for a compliant password.
Proactive Expiry Reminders
Configurable email reminders and a backend systray pill warn users days before expiry — no one is blindsided at login.
Compliance Dashboard & Audit Log
A dashboard buckets every user by compliance status, and an audit log records logins and policy changes for review.
Bulk Rollout & Compliance Report
A bulk wizard force-resets, expires or initializes existing users in one step, and an exportable PDF report gives auditors the evidence they need.
How it works
Define policies
Create policy templates for complexity, expiry, grace, history and reminders, and assign them to groups or users.
Roll out
Use the bulk wizard to initialize expiry dates and force a reset across existing users in one step.
Users stay compliant
Reminder emails and a systray pill warn users ahead of expiry; the live strength meter and generator guide the change.
Audit & report
Review the compliance dashboard and audit log, then export the PDF compliance report for auditors.
Frequently asked
No sales fog. If your question isn't here, email us and we'll answer it the same way.
No. It extends the native password check and reuses its frontend strength component, then layers expiry, history, forced-change, reminders, per-group templates and audit logging on top — the lifecycle and compliance layer native Odoo does not provide.
Buy it on the Odoo App Store
Purchase, download and install directly from the official Odoo Apps Store — you'll always get the latest supported build.
Advanced Password Protection Policy
Complexity rules, expiry with a grace window, reuse prevention and forced-change workflows applied per group, backed by a live strength meter, proactive reminders and an auditor-ready compliance dashboard.
Buy on Odoo App Store