Lock an account or force a new password
From the admin panel you can block an account, which signs the person out on their next request, or require a new password before they do anything else. Blocking keeps the account and its data, and the same action lifts it.