Azure AD Password Policy – Good to know

  • Article

Characters allowed

  • A – Z
  • a -z
  • 0 – 9
  • @ # $ % ^ & * - _ ! + = [ ] { } | \ : ' , . ? / ` ~ " ( ) ;

Characters not allowed

  • Unicode characters
  • Spaces
  • Strong passwords only: Cannot contain a dot character '.' immediately preceding the '@' symbol

Password restrictions

  • 8 characters minimum and 16 characters maximum
  • Strong passwords only: Requires 3 out of 4 of the following:•Lowercase characters
  • Uppercase characters
  • Numbers (0-9)
  • Symbols (see password restrictions above)

Password expiry duration

  • Default value: 90 days
  • Value is configurable using the Set-MsolPasswordPolicy cmdlet from the Azure Active Directory Module for Windows PowerShell.

Password expiry notification

  • Default value: 14 days (before password expires)
  • Value is configurable using the Set-MsolPasswordPolicy cmdlet.

Password Expiry

  • Default value: false days (indicates that password expiry is enabled)
  • Value can be configured for individual user accounts using the Set-MsolUser cmdlet.

Password history

Last password cannot be used again.

Password history duration

Forever

Account Lockout

After 10 unsuccessful sign-in attempts (wrong password), the user will be locked out for one minute. Further incorrect sign-in attempts will lock out the user for increasing durations.