This knowledge article describes a scenario where you might need to compare the password policy that applies for the services account and portal users and the Life-time API authentication for cookies.
Email Security.cloud
The Password policy used for the service account is the same as a Standard Client net users with A cookie Life-time of 2 months validity when Authenticated using API.