The password policy engine provides a mechanism for enforcing rules for user passwords. For example, you can expire passwords for users after a certain time has exceeded. You can also require minimums for password lengths.
Once installed, you can find this feature in the menu system at the following location:
System » Accounts Management » Password Policies