After user provides valid credentials, do a lookup on the DateChange field and calculate if 90 days have passed. If so then require user to provide a new password. Open a form bound to Users and open to this user's record. They enter new password. Code sets value of DateChange field.
Me!DateChange = Date()
The code will likely get quite complex so when you have specific issue, post question.