# How to set up Password Invalidator

The Password Invalidator automatically prompts users to change their login passwords after a pre-defined time period. This helps maintain account security and ensures compliance with organizational password policies.

1. Login into the ZTrust Admin console.

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXcgMgUc-_CcnNoyG9k-THFDmC96IexD7VJyDnMYQFbPkGofR1SZyfbYFT2KYEsxhXxKpfsUxNCP3i0KMtVFmiHMTeegmnjvlRIHEQiu0_xjf3b65mAfLbMaGyZ_xUlSXgtYeMO4?key=Nos8mUv_tNqcadJpexo-R7y6" alt=""><figcaption></figcaption></figure>

2. Go to the “Realm Settings” tab on the right and click on “Event” on the top.

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXeQHH2uVDc5yXs2rWYsYKxTrGr7Iz7LW3daK3Lgk5yD-LzvhDBUgzpxC5ogFj9U9oP2tk8X8Bm5BYnSBLPu7YGPkX505-u4AgkFjyNgc8foxE8GHS7xLb3GU_3Cg22cuaTDDqL8gQ?key=Nos8mUv_tNqcadJpexo-R7y6" alt=""><figcaption></figcaption></figure>

3. Select the password-invalidation in Event Listener dropdown

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXevuQMlZVlwKKjmO1h1clYNSpzpWlpt1wlYiSXhywQIRhpQgrNSetcARZDLHjTRb-9jpQmYggdX9_Lh1wGA2OQq_8cE0DRDQzm-Og710aXw0eM372kp4O8WzQR5mdR3NpiZ8phcLQ?key=Nos8mUv_tNqcadJpexo-R7y6" alt=""><figcaption></figcaption></figure>

4. Navigate to the Authentication tab, under the Realm Settings tab

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXfeTrwzL2fWT-qhd9MaTVbroNZL7ImXkgXs0onT8GMhTDLWW2_6UjZfWgQ8EHx2-tLZ_6DDRTV3DCmrrnNCTn_W_zMhsj_3T9zdVwNshJJJie_7feGL6zG86soc0aGv3nH23tnC5w?key=Nos8mUv_tNqcadJpexo-R7y6" alt=""><figcaption></figcaption></figure>

5. Create an authentication flow on the base of browser flow.

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXeBfd8Tvn9X7YJr_ofR4ij_vLql1Jo8KqzVDaGv3EuqxUCzMQewf24XZ9gfEiCJ1qpUAo_tZx2XjFF6H40iEXB9FPm3GSUxNol6t-Z-AMqDizZEbAse6umj0mI26sSzM0-LUnVoCQ?key=Nos8mUv_tNqcadJpexo-R7y6" alt=""><figcaption></figcaption></figure>

6. Configure the scheduler and warning notification before password expiry.

   1. Copy browser flow and make password invalidator flow like below

   <figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXeDamYkQGGuH0vNo4kf-kqLDUHdagvKd-kucMXmQhBEXIDHxy2tVF_QBX8gYqImU09hWR_rOVdb8uQT5-VTIQ86uXIdB8ujSsZScVb79VLp_jZ4nEM7aENFOppoO4qfY1tLw2USXw?key=Nos8mUv_tNqcadJpexo-R7y6" alt=""><figcaption></figcaption></figure>

   &#x20;b. Configure the time period like below

   <figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXcQfIfv7-FXWvqEqgiivpowy-tw3c65vi6beO0utfwihUE4umaOn-pUYCyvESZ75tZK-uBG3sEYF30T11jEynzA2EUqMxZEJpQnrEsyu5pWC6PhIzXbKvVkycu8ZtT2N7T5cSOZOg?key=Nos8mUv_tNqcadJpexo-R7y6" alt=""><figcaption></figcaption></figure>

&#x20;7\.  Next navigate to the Authentication tab in the left side bar. And choose the policies section like below

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXdS0BA_1Zg3R2JPkLPwH9EuAOpOSpQuufR9c9gQBhShUc1EZkfz2QLKVz9qtDdJa8c19rMEDw0iOAN21zZdmfOxG9mgxkQRN7e8am4oLNGAyNAG213VhOl1ziX9hstChDMBc8tB?key=Nos8mUv_tNqcadJpexo-R7y6" alt=""><figcaption></figcaption></figure>

8. Access the password Policy configuration to establish and customize password policies according to your requirements.

<figure><img src="https://lh7-rt.googleusercontent.com/docsz/AD_4nXfBiZit75yurxi-y2fTx0AexTxJI0IFXh_2un2nxToFBwJ4cYxi05PmisN4WZ4RI7bZQA3CWfh7Y5Y8Sr_xIJidDm8n-M9_aKhriEcwTTyOHS1osDIZvmPTM9q_g790inl4N0gsIQ?key=Nos8mUv_tNqcadJpexo-R7y6" alt=""><figcaption></figcaption></figure>

9. Once configured, the Password Invalidator is ready to enhance security and enforce password policies.

   <br>
