Password Settings: registry value PasswordComplexity and 3 moreComputerHKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS

Policy ID
LAPS_PasswordSettings
Scope
Computer Configuration
Supported on
At least Microsoft Windows 10 or later
Source
Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category
System › LAPS

Registry

PasswordComplexity

REG_DWORDComputer
Enabled value
Depends on the option value
Element
Password Complexity
Options
ItemStored value
Large letters1
Large letters + small letters2
Large letters + small letters + numbers3
Large letters + small letters + numbers + specials4
Large letters + small letters + numbers + specials (improved readability)5
Passphrase (long words)6
Passphrase (short words)7
Passphrase (short words with unique prefixes)8
Apply with .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS]

; Options (use only one)
; Large letters
"PasswordComplexity"=dword:00000001
; Large letters + small letters
"PasswordComplexity"=dword:00000002
; Large letters + small letters + numbers
"PasswordComplexity"=dword:00000003
; Large letters + small letters + numbers + specials
"PasswordComplexity"=dword:00000004
; Large letters + small letters + numbers + specials (improved readability)
"PasswordComplexity"=dword:00000005
; Passphrase (long words)
"PasswordComplexity"=dword:00000006
; Passphrase (short words)
"PasswordComplexity"=dword:00000007
; Passphrase (short words with unique prefixes)
"PasswordComplexity"=dword:00000008
CMD
:: Options (use only one)

:: Large letters
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" /v "PasswordComplexity" /t REG_DWORD /d 1 /f
:: Large letters + small letters
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" /v "PasswordComplexity" /t REG_DWORD /d 2 /f
:: Large letters + small letters + numbers
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" /v "PasswordComplexity" /t REG_DWORD /d 3 /f
:: Large letters + small letters + numbers + specials
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" /v "PasswordComplexity" /t REG_DWORD /d 4 /f
:: Large letters + small letters + numbers + specials (improved readability)
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" /v "PasswordComplexity" /t REG_DWORD /d 5 /f
:: Passphrase (long words)
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" /v "PasswordComplexity" /t REG_DWORD /d 6 /f
:: Passphrase (short words)
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" /v "PasswordComplexity" /t REG_DWORD /d 7 /f
:: Passphrase (short words with unique prefixes)
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" /v "PasswordComplexity" /t REG_DWORD /d 8 /f
PowerShell
# Common: create the key
New-Item -Path 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS' -Force | Out-Null

# Options (use only one)
# Large letters
New-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS' -Name 'PasswordComplexity' -PropertyType DWord -Value 1 -Force | Out-Null
# Large letters + small letters
New-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS' -Name 'PasswordComplexity' -PropertyType DWord -Value 2 -Force | Out-Null
# Large letters + small letters + numbers
New-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS' -Name 'PasswordComplexity' -PropertyType DWord -Value 3 -Force | Out-Null
# Large letters + small letters + numbers + specials
New-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS' -Name 'PasswordComplexity' -PropertyType DWord -Value 4 -Force | Out-Null
# Large letters + small letters + numbers + specials (improved readability)
New-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS' -Name 'PasswordComplexity' -PropertyType DWord -Value 5 -Force | Out-Null
# Passphrase (long words)
New-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS' -Name 'PasswordComplexity' -PropertyType DWord -Value 6 -Force | Out-Null
# Passphrase (short words)
New-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS' -Name 'PasswordComplexity' -PropertyType DWord -Value 7 -Force | Out-Null
# Passphrase (short words with unique prefixes)
New-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS' -Name 'PasswordComplexity' -PropertyType DWord -Value 8 -Force | Out-Null

PasswordLength

REG_DWORDComputer
Enabled value
Depends on the option value
Element
Password Length
Value type
REG_DWORD
Minimum value
8
Maximum value
64
Apply with .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS]

; Value names and types follow the ADMX. Replace <enter value> below with your own data
"PasswordLength"=dword:<enter value>
CMD
:: Value names and types follow the ADMX. Replace <enter value> below with your own data

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" /v "PasswordLength" /t REG_DWORD /d "<enter value>" /f
PowerShell
# Value names and types follow the ADMX. Replace <enter value> below with your own data

New-Item -Path 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS' -Force | Out-Null
New-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS' -Name 'PasswordLength' -PropertyType DWord -Value '<enter value>' -Force | Out-Null

PasswordAgeDays

REG_DWORDComputer
Enabled value
Depends on the option value
Element
Password Age (Days)
Value type
REG_DWORD
Minimum value
1
Maximum value
365
Apply with .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS]

; Value names and types follow the ADMX. Replace <enter value> below with your own data
"PasswordAgeDays"=dword:<enter value>
CMD
:: Value names and types follow the ADMX. Replace <enter value> below with your own data

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" /v "PasswordAgeDays" /t REG_DWORD /d "<enter value>" /f
PowerShell
# Value names and types follow the ADMX. Replace <enter value> below with your own data

New-Item -Path 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS' -Force | Out-Null
New-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS' -Name 'PasswordAgeDays' -PropertyType DWord -Value '<enter value>' -Force | Out-Null

PassphraseLength

REG_DWORDComputer
Enabled value
Depends on the option value
Element
Passphrase Length (words)
Value type
REG_DWORD
Minimum value
3
Maximum value
10
Apply with .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS]

; Value names and types follow the ADMX. Replace <enter value> below with your own data
"PassphraseLength"=dword:<enter value>
CMD
:: Value names and types follow the ADMX. Replace <enter value> below with your own data

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS" /v "PassphraseLength" /t REG_DWORD /d "<enter value>" /f
PowerShell
# Value names and types follow the ADMX. Replace <enter value> below with your own data

New-Item -Path 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS' -Force | Out-Null
New-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS' -Name 'PassphraseLength' -PropertyType DWord -Value '<enter value>' -Force | Out-Null