Password Policy & Expiry
Enforce password complexity, rotation, reuse-block and optional breach-list check (BYOK HIBP)
Odoo's native password handling is minimal. This module adds a configurable, per-company password policy: enforce length and character rules, force regular rotation, block reuse of recent passwords, and optionally screen passwords against Have I Been Pwned — without any password ever leaving the server in clear text.
Key Features
Complexity Rules
Minimum length, required uppercase, lowercase, digit and special characters, minimum unique characters and a username-block rule — all set per company.
Rotation & Expiry
Maximum password age in days with a configurable warning window and minimum age, plus computed expiry date, days-left and an expired flag per user.
Reuse History
Store salted PBKDF2 hashes of the last N passwords and block reuse, so users cannot cycle straight back to an old credential.
Breach-List Check (BYOK)
Optional Have I Been Pwned Pwned-Passwords check using a k-anonymity SHA-1 prefix range query. Bring your own key and endpoint; a deterministic offline mode is included.
Change Wizard
A guided password-change wizard validates the new password against the active policy before it is accepted, with clear failure messages.
Audit & Scheduling
Audit log of changes and validation outcomes with strength score and actor, plus a scheduled job that flags expired and soon-to-expire users.
Cyber Essentials Aligned
Complexity, rotation and breach screening map to common Cyber Essentials password expectations, giving you evidence of enforced credential hygiene.
Privacy-Safe Breach Check
K-anonymity range queries mean only a hash prefix is sent. Your users' passwords never leave the server in clear, and the check is entirely opt-in.
Screenshots
Password Audit
Change Password
Password Policies
Why Choose This Module
Optional Have I Been Pwned Pwned-Passwords check using a k-anonymity SHA-1 prefix range query. Bring your own key and endpoint; a deterministic offline mode is included.
Specifications
- Compatible: Odoo 18.0 / 19.0
- License: OPL-1
- Languages: English
- Author: Pokutsoft
- Dependencies: base, mail
- Support: support@pokutsoft.com
Update date: 2026-07-02