Hey there, we have a few security compliance needs...
# support-questions-legacy
s
Hey there, we have a few security compliance needs for our app and I'm wondering if supertokens handles them. 1. Does supertokens have support for making sure when a user resets their password, they do not reuse their previous password or previous N passwords? 2. Does supertokens support requiring a user to change their password after X number of days? 3. Is there a max login attempt for the email password recipe? I see that there is a passwordless configuration where a parameter is passed to the core service. Is there something similar for the email password flow?