Password Settings
- Policy ID
- LAPS_PasswordSettings
- Scope
- Computer Configuration
- Supported on
- At least Microsoft Windows 10 or later
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- System › LAPS
Description
Configures password parameters
Password complexity: which characters are used when generating a new password
Default: Large letters + small letters + numbers + special characters
Password length
Minimum: 8 characters
Maximum: 64 characters
Default: 14 characters
Password age in days
Minimum: 1 day (7 days when backup directory is configured to be Azure AD)
Maximum: 365 days
Default: 30 days
Passphrase length
Minimum: 3 words
Maximum: 10 words
Default: 6 words
See https://go.microsoft.com/fwlink/?linkid=2188435 for more information.
Passphrase list taken from "Deep Dive: EFF's New Wordlists for Random Passphrases" by Electronic Frontier Foundation, and is used under a CC-BY-3.0 Attribution license. See https://go.microsoft.com/fwlink/?linkid=2255471 for more information.
Options
Registry
- PasswordComplexityREG_DWORD
- PasswordLengthREG_DWORD
- PasswordAgeDaysREG_DWORD
- PassphraseLengthREG_DWORD