Shield Security: Force administrator passwords to expire after 90 days

gistfile1.txt

<?php declare( strict_types=1 );

/**
 * Shield Security for WordPress:
 * Force administrator passwords to expire after 90 days.
 *
 * Add this to your theme's functions.php file or a custom snippets plugin.
 *
 * Shield passes:
 * - $isExpired: Shield's current password expiry decision.
 * - $user:      The WP_User being checked.
 * - $passAge:   The current password age, in seconds.
 * - $expireTTL: Shield's configured password expiry timeout, in seconds.
 */
add_filter(
	'shield/user/is_user_password_expired',
	function ( bool $isExpired, \WP_User $user, int $passAge, int $expireTTL ) :bool {

		if ( \in_array( 'administrator', (array)$user->roles, true ) ) {
			$isExpired = $passAge > 90 * \DAY_IN_SECONDS;
		}

		return $isExpired;
	},
	10,
	4
);