# Password timeouts and expiry - Need these options clarifying **URL:** \ **Category:** Webmin\ **Created:** [May 1, 2024, 8:42am UTC](https://forum.virtualmin.com/t/password-timeouts-and-expiry-need-these-options-clarifying/126358 "2024-05-01T08:42:01Z")\ **Posts on this page:** 13\ **Page:** 1
**Author:** ![shoulders](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/shoulders/32/10086_2.png) [@shoulders](https://forum.virtualmin.com/u/shoulders)\ **Post date:** [May 1, 2024, 8:42am UTC](https://forum.virtualmin.com/t/password-timeouts-and-expiry-need-these-options-clarifying/126358/1 "2024-05-01T08:42:01Z")
| SYSTEM INFORMATION | | | --- | --- | | OS type and version | Ubuntu Linux 22.04.4 | | Webmin version | 2.111 | | Usermin version | 2.010 | | Virtualmin version | 7.10.0 | | Theme version | 21.10 | | Package updates | All installed packages are up to date | On the page `Webmin --> Webmin configuration --> Authentication` there are some options with no tool tips so I cannot fully figure out how they work: - **Password timeouts** - **Password expiry policy** **Block hosts with more than 5 failed logins for 60 seconds.** - does this mean IP addresses? Any help explaining these would be appreciated. ---
**Author:** ![Ilia](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/ilia/32/10185_2.png) [@Ilia](https://forum.virtualmin.com/u/Ilia)\ **Post date:** [May 1, 2024, 9:57am UTC](https://forum.virtualmin.com/t/password-timeouts-and-expiry-need-these-options-clarifying/126358/2 "2024-05-01T09:57:48Z")
Hello, Thanks for the heads up! > [@shoulders](#): > > if so, should this be renamed `Authentication Control` or something better as this page controls more than passwords? No, I think **Authentication** is best. Besides, it has been used for decades. > [@shoulders](#): > > Is this in regards to sessions? Yes. > [@shoulders](#): > > Where is the timer set for how long before a password is timed out? @Jamie, can you comment on this? > [@shoulders](#): > > Where is the option to specify how old a password is before it gets expired? This is a native Linux feature. Check the **System ⇾ Users and Groups** module. ---
**Author:** ![shoulders](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/shoulders/32/10086_2.png) [@shoulders](https://forum.virtualmin.com/u/shoulders)\ **Post date:** [May 1, 2024, 10:10am UTC](https://forum.virtualmin.com/t/password-timeouts-and-expiry-need-these-options-clarifying/126358/3 "2024-05-01T10:10:49Z")
> [@Ilia](#): > > This is a native Linux feature. Check the **System ⇾ Users and Groups** module. I did look in this module earlier but there was nothing relevant. the closet I found was ![image](https://cdn.forum.virtualmin.com/uploads/default/original/2X/e/e656418abdbbd08c76d46098811d1029d3ce49df.png) no mention of password expiry. and obviously password restrictions is not the right thing ---
**Author:** ![stefan1959](https://cdn.forum.virtualmin.com/letter_avatar_proxy/v4/letter/s/49beb7/32.png) [@stefan1959](https://forum.virtualmin.com/u/stefan1959)\ **Post date:** [May 1, 2024, 10:36am UTC](https://forum.virtualmin.com/t/password-timeouts-and-expiry-need-these-options-clarifying/126358/4 "2024-05-01T10:36:29Z")
edit a user you will see a expiry, but I thought a webmin user where different type of user. ![image](https://cdn.forum.virtualmin.com/uploads/default/original/2X/8/88d0592344e4895241ed73fe4e05af6055c1116e.png) there this as well ![image](https://cdn.forum.virtualmin.com/uploads/default/original/2X/c/ccc57be546c0b34e7c6d63bb272fb91f0ff9d662.png) ---
**Author:** ![shoulders](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/shoulders/32/10086_2.png) [@shoulders](https://forum.virtualmin.com/u/shoulders)\ **Post date:** [May 1, 2024, 10:45am UTC](https://forum.virtualmin.com/t/password-timeouts-and-expiry-need-these-options-clarifying/126358/5 "2024-05-01T10:45:18Z")
thanks @Ilia the information is very helpful. Thanks @stefan1959 I will update my notes. ---
**Author:** ![Jamie](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/jamie/32/8589_2.png) [@Jamie](https://forum.virtualmin.com/u/Jamie)\ **Post date:** [May 1, 2024, 8:50pm UTC](https://forum.virtualmin.com/t/password-timeouts-and-expiry-need-these-options-clarifying/126358/6 "2024-05-01T20:50:12Z")
> [@Ilia](#): > > > [@shoulders](#): > > > > Where is the timer set for how long before a password is timed out? > > @Jamie, can you comment on this? What do you mean by password timed out though? Do you mean how long till the user is forced to change it? ---
**Author:** ![shoulders](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/shoulders/32/10086_2.png) [@shoulders](https://forum.virtualmin.com/u/shoulders)\ **Post date:** [May 2, 2024, 6:54am UTC](https://forum.virtualmin.com/t/password-timeouts-and-expiry-need-these-options-clarifying/126358/7 "2024-05-02T06:54:33Z")
> [@shoulders](#): > > Where is the timer set for how long before a password is timed out? @Jamie The relevant section is `Webmin --> Webmin configuration --> Authentication --> Password timeouts` ![image](https://cdn.forum.virtualmin.com/uploads/default/original/2X/2/22620fb132d13571c06d3b64f460fb62e7520d5e.png) - i do not know what this option does - it implies there are password timers that you can set somewhere - there is not tooltip - I am a windows guy - **Proposed solution:** Add a tooltip and make sure the option name fits its function - if this controls all the options on this page, rename it to something like `Authentication Control` ### also stuck on whast this does `Webmin --> Webmin configuration --> Authentication --> Failed login blocks --> Block hosts` ![image](https://cdn.forum.virtualmin.com/uploads/default/original/2X/0/0c1470a2ee5d497186b62ebf85aa5e33920e0bff.png) - does this mean IP addresses? - does this mean rDNS? - or referrer header? - or both? ---
**Author:** ![jimr1](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/jimr1/32/14173_2.png) [@jimr1](https://forum.virtualmin.com/u/jimr1)\ **Post date:** [May 2, 2024, 7:16am UTC](https://forum.virtualmin.com/t/password-timeouts-and-expiry-need-these-options-clarifying/126358/8 "2024-05-02T07:16:54Z")
did you read the arrowed text ? ![image](https://cdn.forum.virtualmin.com/uploads/default/original/2X/b/b3022b95577361d4044485ef21cc92eb8f11d6a3.png) host will = host … a host has an IP address ---
**Author:** ![Jamie](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/jamie/32/8589_2.png) [@Jamie](https://forum.virtualmin.com/u/Jamie)\ **Post date:** [May 3, 2024, 4:51am UTC](https://forum.virtualmin.com/t/password-timeouts-and-expiry-need-these-options-clarifying/126358/9 "2024-05-03T04:51:01Z")
I’ll add a tooltip with details on what password timeouts mean, but basically when this is enabled there will be an increasing delay between failed login attempts. As for the “block hosts” option, it means client IP addresses. I’ll update the text to make this clearer. ---
**Author:** ![shoulders](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/shoulders/32/10086_2.png) [@shoulders](https://forum.virtualmin.com/u/shoulders)\ **Post date:** [May 3, 2024, 6:48am UTC](https://forum.virtualmin.com/t/password-timeouts-and-expiry-need-these-options-clarifying/126358/10 "2024-05-03T06:48:11Z")
> [@Jamie](#): > > I’ll add a tooltip with details on what password timeouts mean, but basically when this is enabled there will be an increasing delay between failed login attempts. and if possible, where the timeout values(s) come from ---
**Author:** ![Jamie](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/jamie/32/8589_2.png) [@Jamie](https://forum.virtualmin.com/u/Jamie)\ **Post date:** [May 3, 2024, 3:18pm UTC](https://forum.virtualmin.com/t/password-timeouts-and-expiry-need-these-options-clarifying/126358/11 "2024-05-03T15:18:00Z")
> [@shoulders](#): > > and if possible, where the timeout values(s) come from There’s no way to configured the password timeout delays … they are fixed in Webmin ---
**Author:** ![shoulders](https://cdn.forum.virtualmin.com/user_avatar/forum.virtualmin.com/shoulders/32/10086_2.png) [@shoulders](https://forum.virtualmin.com/u/shoulders)\ **Post date:** [May 3, 2024, 3:19pm UTC](https://forum.virtualmin.com/t/password-timeouts-and-expiry-need-these-options-clarifying/126358/12 "2024-05-03T15:19:00Z")
i will add this to my notes. thanks ---
**Author:** ![system](https://cdn.forum.virtualmin.com/uploads/default/original/2X/c/cd96d761e326db4b2bef94886a639109bd7a8e76.svg) [@system](https://forum.virtualmin.com/u/system)\ **Post date:** [May 11, 2024, 3:19pm UTC](https://forum.virtualmin.com/t/password-timeouts-and-expiry-need-these-options-clarifying/126358/13 "2024-05-11T15:19:43Z")
Closed on May 11, 2024, 3:19pm UTC This topic was automatically closed 8 days after the last reply. New replies are no longer allowed.