Yes, the setting Michael mentions was added to Moodle 3.9. Totara 9 was based on Moodle 3.3/3.4 from 2017.
Security and privacy
Change password policy
This discussion has been locked so you can no longer reply to it.