How it the backend password expiration procedure implemented?

See also: