Database Password Security

10.2.0.4 database.

 I have a PROFILE setup to manage some user accounts.  The profile is defined to expire the password in 60 days.  A recent query shows some of the accounts with passwords older than 60 days. 

I am using the VERIFY_FUNCTION to handle the some password security. 

Need to know if there is something else im missing that may be superseding the password age I have defined.

VERIFY_FUNCTION

CREATE OR REPLACE FUNCTION verify_function
(username varchar2,
  password varchar2,
  old_password varchar2)
  RETURN boolean IS
   n boolean;
   m integer;
   differ integer;
   isdigit boolean;
   ischar  boolean;
   ispunct boolean;
   digitarray varchar2(20);
   punctarray varchar2(25);