# SecurityPasswordStatusDto

A model the API reference uses in a request or a response. The operation pages link every field typed as this model here.

## Fields
- `hasPassword` (boolean): Whether the account has a local password at all.
- `isExternal` (boolean): Whether the account signs in through an external identity provider, in which case the  password and its rotation are that provider's concern and not the platform's.
- `lastChangedUtc` (string(date-time)): When the password was last changed, in UTC, or `null` for an account whose password  predates the field and has not been changed since. (nullable)
- `ageDays` (integer(int32)): Whole days since the last change, or `null` when `lastChangedUtc` is. (nullable)
- `expiryEnforced` (boolean): Whether the tenant forces passwords to be changed periodically.
- `expiryPeriodDays` (integer(int32)): The tenant's rotation period in days. Meaningful only when `expiryEnforced` is  `true`; the setting carries a value either way.
- `expiresUtc` (string(date-time)): When the current password stops being accepted, in UTC, or `null` when rotation is not  enforced or the last-changed instant is unknown. (nullable)
- `daysUntilExpiry` (integer(int32)): Whole days until `expiresUtc`, negative once it has passed, or `null` when  there is no expiry to count towards. (nullable)

## See also

- [All documentation](https://devportal.demo.winkpg.io/llms.txt): the machine-readable index of every public page on this site.