[The testing instructions here rely on the guest user having timecreated of 0, it would be worth testing this before applying the patch to ensure you *do* get prompted to change password as guess to ensure you are testing the fix] In Plugins > Authentication > Manual accounts Enable password expiry Set the expiry to 30 days In Site administration > Plugins > Authentication > Manage authentication Enable guest access button In a new window, try to login as guest using the button VERIFY: you don't get prompted to change your password when logging in