TOT-5 Keep track for when the password was last (re)set. Check after each login to not have passed half year.