SBN

How to configure password policies in Windows 10

Introduction

A password is one of the common methods to authenticate user identity. Windows OS comes with various authentication options like PIN, password, fingerprint and token, but the feature used most often is still the password. 

In this article, we will look into how to configure password policies in Windows 10. For a standalone computer, the security policies can be configured using local security policy editor or secpol.msc

Type “secpol” in the Windows 10 search bar and click on the resulting applet shown.

Click on the Account Policies setting, followed by the Password Policy option.

Password Policy options.

  1. Enforce password history: This allows the user to define the number of unique passwords allowed per user before reusing the old password. For example, if the value is set to 5, the user can reuse the first password only after 5 unique password changes. By default, the value is not configured. The allowed value ranges from 0 to 24.
  2. Maximum password age: Allows the user to set the password duration (in days) after which the user is forced to change the password. For example, if the value is set to 30, the user will be prompted to change the password on the thirty-first day. By default, the value is not configured. The allowed value ranges from 0 to 999. If the value is set to 0, that means the password will never expire.
  3. Minimum password age: Allows the user to set the duration (in days) that a password must be used before the user changes it. For example, if the value is set to 5, the user can only change the password after 5 days. By default, the value is not configured. The allowed value ranges from 1 to 998. If the value is set to 0, that means the (Read more...)

*** This is a Security Bloggers Network syndicated blog from Infosec Resources authored by Satyam Singh. Read the original post at: http://feedproxy.google.com/~r/infosecResources/~3/Pkj-b4Wq7uQ/