Microsoft Wants To Get Rid Of The Mandatory Change
Microsoft Wants to get rid of the Mandatory change of Windows password after Sixty Days. Microsoft wants to get rid of the 60-day expiration date for Windows passwords for companies.
The company reports this in a blog post.
The requirement states that business users must change their password every sixty days.
For security reasons, employees of companies using Windows 10 must change their password every month.
According to Microsoft, this measure has little effect, and the requirement can be counterproductive.
According to Microsoft, the policy to force a password change assures that people only make a small change to their existing password or forget their new password.
That while the changed system with a period of sixty days only offers security if the password is stolen and misused within that time.
Microsoft, therefore, wants to bet on alternatives, such as a list of prohibited passwords or the use of two-step verification.
The company emphasises that nothing changes to the other requirements for Windows passwords, such as complexity and length.
The proposal to remove the expiration date is not yet final.
A significant update for Windows 10 will follow in May,
but it is not apparent whether it will contain the intended change for the password policy.
The intended change only applies to Windows for companies.
For private users of the operating system, there is no requirement to change passwords every month.