If password policy updated/Changed,does it apply retroactively to all active users?

Summary:

If password policy updated/Changed, does it apply retroactively to all active users? And unable to access account until and unless we change the password as per new policy?

Or it will ask to setup password as per new policy, ONLY when old password get expired as per previous policy OR we change existing password manually

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):