PLSql - do not allow user to change password within 4 hours from last update

Question

Right now we are not capturing the last password update timestamp. What is the best way to capture the password update time and then what is the best way to not allow user to ch