The general security settings that you configure control the security of the browser application itself, such as whether the application can be included in an iframe — such as within the application’s integration with Salesforce.
The user password settings control whether passwords expire, and the strength required for passwords.