System and method for password expiration management

A method comprising:

• sending a notification to a user device of a user that a password reset is required;
• receiving from the user device a hash of a password at a reset date and a reset time;
• determining a default expiration date for the password based on the reset date;
• determining a default expiration time for the password based on the reset time;
• determining excluded dates, wherein the excluded dates comprise dates that are excluded from being an expiration date for the password;
• determining excluded time intervals, wherein the excluded time intervals comprise times that are excluded from being an expiration time for the password;
• determining allowable dates, wherein the allowable dates comprise dates that can be the expiration date for the password;
• determining allowable time intervals, wherein the allowable time intervals comprise times that can be the expiration time for the password;
• determining whether the default expiration date falls on a first excluded date of the excluded dates;
• in response to determining that the default expiration date falls on the first excluded date, setting a first allowable date of the allowable dates that is before or after the first excluded date as the expiration date;
• determining whether the default expiration time falls within a first excluded time interval of the excluded time intervals;
• in response to determining that the default expiration time falls within the first excluded time interval, setting a first allowable time that falls within a first allowable time interval of the allowable time intervals as the expiration time;
• after setting the first allowable date and the first allowable time, receiving a request to determine a new expiration date for the password;
• in response to receiving the request, determining a first login date for the user;
• if the first login date is later than the reset date:
• determining a number of days between the first login date and the reset date;
• and
• shifting the first allowable date by the determined number of days to generate the new expiration date.

A non-transitory computer-readable medium storing instructions that, when executed by one or more processors, cause the one or more processors to:

• send a notification to a user device of a user that a password reset is required;
• receive from the user device a hash of a password at a reset date and a reset time;
• determine a default expiration date for the password based on the reset date;
• determine a default expiration time for the password based on the reset time;
• determine excluded dates, wherein the excluded dates comprise dates that are excluded from being an expiration date for the password;
• determine excluded time intervals, wherein the excluded time intervals comprise times that are excluded from being an expiration time for the password;
• determine allowable dates, wherein the allowable dates comprise dates that can be the expiration date for the password;
• determine allowable time intervals, wherein the allowable time intervals comprise times that can be the expiration time for the password;
• determine whether the default expiration date falls on a first excluded date of the excluded dates;
• in response to determining that the default expiration date falls on the first excluded date, set a first allowable date of the allowable dates that is before or after the first excluded date as the expiration date;
• determine whether the default expiration time falls within a first excluded time interval of the excluded time intervals;
• in response to determining that the default expiration time falls within the first excluded time interval, set a first allowable time that falls within a first allowable time interval of the allowable time intervals as the expiration time;
• after setting the first allowable date and the first allowable time, receive a request to determine a new expiration date for the password;
• in response to receiving the request, determine a first login date for the user;
• if the first login date is later than the reset date:
• determine a number of days between the first login date and the reset date;
• and
• shift the first allowable date by the determined number of days to generate the new expiration date.