Home

Howdy folks, 

 

Many of you have been reminding us that we still have a 16-character password limit for accounts created in Azure AD. While our on-premises Windows AD allows longer passwords and passphrases, we previously didn’t have support for this for cloud user accounts in Azure AD.  

 

Today, I am pleased to announce that we have changed this limit, allowing you to set a password with up to 256 characters, including spaces. You can see more details on password requirements in our password policy documentation. 

 

 

New_User_PW_Trimmed.JPG

If you have questions or comments, please feel free to reach out to us on Azure AD UserVoice. 

 

Best regards, 

 

Alex Simons (Twitter: @Alex_A_Simons)

Vice President of Program Management

Microsoft Identity Division

12 Comments
Visitor
https://account.activedirectory.windowsazure.com/ChangePassword.aspx still has validators limiting the password to 16 characters, will this page be fixed as well?
Microsoft

@sivey42  yes we are in the process of fixing that page as well. 

Senior Member
Great news!
Frequent Visitor

Thank you to you and your team for taking this feedback seriously. 

 

Excellent response, bravo! 

New Contributor

Why are you still requiring symbols and numbers?  Isn't length THE determining factor on how difficult it is to crack a password?  Requiring symbols and numbers (and all that upper/lower jazz) seems old skool at best.

Occasional Visitor

Awesome to see improvement, but are we also gaining the ability to set minimum length?  It is common knowledge that a 8 character password is not a good idea.  And it goes against many organizations password policies making the selfservice tool almost useless unless you want to throw your policy out the window.  Additionally the ability to control complexity requirements is a must.  MS has been a pushing some of the newer nist standards on passwords but azure goes against the standard.  

Microsoft

@Michael DeMond we have heard the feedback for removing the password character complexity requirement, there are multiple moving parts to this work but it is on the radar. 

Microsoft

@Reedtechno thanks for the comment, we are investigating the ability to set custom password lengths but we do not have an ETA for this feature at this time. 

Occasional Visitor

When we try office365 (email) password information says maximum 16.

Frequent Contributor

..

Today, I am pleased to announce that we have changed this limit, allowing you to set a password with up to 256 characters, including spaces. You can see more details on password requirements in our password policy documentation. 

..

Although the maximum length has been updated in the password policy documentation, it still says that "spaces" are not allowed.

 

Is it or is it not?

 

Characters not allowed
  • Unicode characters.
  • Spaces.
  • Cannot contain a dot character "." immediately preceding the "@" symbol”.

 

 

Microsoft

@Abhimanyu Singh yes "Spaces" are allowed for passwords. We are updating the doc to reflect this typo, thanks for catching it! 

Frequent Contributor

Great @Eliza Kuzmenko :) That was fast! The doc has been updated.