The password policy engine provides a mechanism for enforcing rules for user passwords. For example, you can expire passwords for users after a certain time has exceeded. You can also require minimums for password lengths.
You can install this module from the ClearOS Marketplace.
Once installed, you can find this feature in the menu system at the following location:
System » Accounts Management » Password Policies