diff --git a/apps/authentication/errors.py b/apps/authentication/errors.py
index 06631742a140128b05045371a6c4c88e806c5f7b..8f9ba9307ce7824a58336e770241dfec868a661b 100644
--- a/apps/authentication/errors.py
+++ b/apps/authentication/errors.py
@@ -16,6 +16,7 @@ reason_user_not_exist = 'user_not_exist'
 reason_password_expired = 'password_expired'
 reason_user_invalid = 'user_invalid'
 reason_user_inactive = 'user_inactive'
+reason_user_expired = 'user_expired'
 reason_backend_not_match = 'backend_not_match'
 reason_acl_not_allow = 'acl_not_allow'
 
@@ -28,6 +29,7 @@ reason_choices = {
     reason_password_expired: _("Password expired"),
     reason_user_invalid: _('Disabled or expired'),
     reason_user_inactive: _("This account is inactive."),
+    reason_user_expired: _("This account is expired"),
     reason_backend_not_match: _("Auth backend not match"),
     reason_acl_not_allow: _("ACL is not allowed"),
 }
diff --git a/apps/authentication/mixins.py b/apps/authentication/mixins.py
index e13a88c87ec3fe5fd45485d1ebc10649bfd1529e..89d7b85fd294168148b1e964fa36348673f8abdc 100644
--- a/apps/authentication/mixins.py
+++ b/apps/authentication/mixins.py
@@ -171,7 +171,7 @@ class AuthMixin:
         if not user:
             self.raise_credential_error(errors.reason_password_failed)
         elif user.is_expired:
-            self.raise_credential_error(errors.reason_user_inactive)
+            self.raise_credential_error(errors.reason_user_expired)
         elif not user.is_active:
             self.raise_credential_error(errors.reason_user_inactive)
         return user
diff --git a/apps/users/models/user.py b/apps/users/models/user.py
index 52dccbeaa51d962126ca3bfcd97bf423dffe8734..fab14e252a10dea4906a728000c356a1d07f8746 100644
--- a/apps/users/models/user.py
+++ b/apps/users/models/user.py
@@ -667,6 +667,11 @@ class User(AuthMixin, TokenMixin, RoleMixin, MFAMixin, AbstractUser):
         else:
             return user_default
 
+    def unblock_login(self):
+        from users.utils import LoginBlockUtil, MFABlockUtils
+        LoginBlockUtil.unblock_user(self.username)
+        MFABlockUtils.unblock_user(self.username)
+
     @property
     def login_blocked(self):
         from users.utils import LoginBlockUtil, MFABlockUtils