Password Settings

Supported on: At least Microsoft Windows 10 or later

Registry

HKLM SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS

Options

PasswordComplexity enum
  • Large letters -> 1
  • Large letters + small letters -> 2
  • Large letters + small letters + numbers -> 3
  • Large letters + small letters + numbers + specials -> 4
  • Large letters + small letters + numbers + specials (improved readability) -> 5
  • Passphrase (long words) -> 6
  • Passphrase (short words) -> 7
  • Passphrase (short words with unique prefixes) -> 8
PasswordLength decimal - range 8-64
PasswordAgeDays decimal - range 1-365
PassphraseLength decimal - range 3-10

Description

Configures password parameters Password complexity: which characters are used when generating a new password Default: Large letters + small letters + numbers + special characters Password length Minimum: 8 characters Maximum: 64 characters Default: 14 characters Password age in days Minimum: 1 day (7 days when backup directory is configured to be Azure AD) Maximum: 365 days Default: 30 days Passphrase length Minimum: 3 words Maximum: 10 words Default: 6 words See https://go.microsoft.com/fwlink/?linkid=2188435 for more information. Passphrase list taken from "Deep Dive: EFF's New Wordlists for Random Passphrases" by Electronic Frontier Foundation, and is used under a CC-BY-3.0 Attribution license. See https://go.microsoft.com/fwlink/?linkid=2255471 for more information.