admin stuck on " It's time to change your password."

[ran2345]

Steps to reproduce

login in to admin after 4 months from installation opened the my account/Account information page with the title “It's time to change your password.”
I changed my password and pressed “Save Account”

Expected result

That I will receive the dashboard page and start working

Actual result

I received the same page (my account/Account information) with the same “It's time to change your password.” Title.
I tried to log out and log back in and I received the same page
I cleared the cache and cookies and then log in and received the same page

[andyworkbase]

have the same issue on ME 2

[ntoombs19]

I had this happen to me today as well. You can avoid this happening in the future by going to STORES -> CONFIGURATION -> ADVANCED -> ADMIN -> SECURITY -> PASSWORD CHANGE and setting that field to Recommended. If you have direct access to the database you can run this query to set that field to recommended directly

UPDATE `core_config_data` SET `value` = '0' WHERE `path` = 'admin/security/password_is_forced';

Or if you have n98-magerun2 installed, you can run this command

n98-magerun2.phar config:set admin/security/password_is_forced 0

[mazhalai]

@ran2345 thank you for reporting, we have created MAGETWO-52437 to investigate and fix.

[erikhansen]

@mazhalai I just experienced this on a project. More and more merchants are going to run into this over the coming weeks as the Password Lifetime (days) value defaults to 90 days, so merchants who installed Magento 2 90 days prior will run into this issue. In fact, every merchant that has installed Magento 2 up to this point is going to run into this issue, so this is a pretty big issue that should be addressed ASAP. I would recommend fast-tracking a solution to this and including it in your next release.

[piotrekkaminski]

It is fixed in develop branch and should be released in a patch release. cc @elenleonova for more information.

[srqdeveloper]

I was unable to fix the issue with the database script provided by @ntoombs19, but running the following script on the admin_passwords table worked:

UPDATE admin_passwords SET expires = <<some future timestamp>> WHERE user_id = <<admin_user_id>>;

[erikhansen]

@srqdeveloper I used the MySQL script from @ntoombs19 on a CE and EE installation and it worked fine. Maybe you didn't flush the cache afterwards?

[FoxtrotOscar2]

This issue apparently still exists in 2.0.7.

[tecjam]

I can confirm that this issue still exists in 2.0.7

[Manashvi]

Yes this issue still continue to exist in the version 2.0.7

[alexbartsch]

@srqdeveloper For me, the query from @ntoombs19 also didn't work. I figured out, that this is because there is no row with path = 'admin/security/password_is_forced'.

Run this query instead:

INSERT INTO `core_config_data` SET `value` = '0', `path` = 'admin/security/password_is_forced';

[MaximKitsenko]

@alexbartsch @srqdeveloper
script from comment above works : UPDATE admin_passwords SET expires = <<some future timestamp>> WHERE user_id = <<admin_user_id>>;
if it doesn't work that means

1. you use too small <<some future timestamp>> (for me 1999999998 works)or incorrect <<admin_user_id>>. Don't forget that sometimes there are alot of users represented in this table, i prefer to change all lines in the table (=> to impact on all users)
2. your cache holds old data. I suggest to clean browser cache and coockies

but for me it is more simple to use MySQL UI client, and edit all rows in table admin_passwords. just insert some big value, f.e. 1999999998 into expired column

http://stackoverflow.com/questions/38743317/magento-stuck-on-its-time-to-change-your-password/38743436#38743436