A plugin to devise that will expire user passwords after a set amount of time and prompt them to update their password.
devise_session_expirable is an enhanced version of devise's timeoutable module that ensures that no session is allowed to last forever.
This is a simple, however wonderful devise extension to expire user password.