User account Password Expiration Date has past date but not expired

We have certain service accounts that uses API through basic authentication (username/password). However, I noticed that most of the service accounts password expiration date are on the past and they really never got expired.

We do have SSO enabled, but these service accounts doesn't authenticate through SSO. For now we are Ok as it did not break anything. How to make sure the password policy that we set is working? Do we need to run Password Expiry Report everyday to make sure the password policies are applied on the user accounts?

TIA for your response!

Vj