For your security, Microsoft already requires a minimum password length for all Microsoft accounts. If you want to apply all local accounts, you can set a minimum password length for each user in Windows 10. Here’s how.
By default, when create a new local user in Windows 10, the account does not require a password. However, if you want to implement a minimum password length for everyone, there are a few ways to apply this precondition for computer security.
Home users: Set a minimum password length via the command line
First, you will need to run a high command line instance. If you prefer to use PowerShell, you can also use this. The following command works pretty much the same in any of the programs, but be sure to click «Run as administrator» if you choose to use PowerShell.
Click the Start button, type «cmd» in the search box, right-click the «Command Prompt» result, and select «Run as administrator.»
When prompted, type the following command (replacing «PassLength» with the minimum password length you want to apply):
cuentas netas / minpwlen: PassLength
Press the Enter key and you will see a message that the order has been completed successfully.
Note: While you can technically choose any length between 1 and 20 characters, try to choose something that provides adequate security and doesn’t make it too difficult for users to remember passwords.
Now, if you want to make sure it’s been applied, type the following command, and then press the Enter key to verify:
To remove the minimum password length, type the following command to remove the passwords required for local accounts:
cuentas netas / minpwlen: 0
To make your accounts even more secure, you can apply a maximum password age, which causes users to generate a new password after a period of time.
Professional and business users: Set a minimum password length through Group Policy
For anyone who doesn’t want to mess with the command prompt or is more comfortable with a graphical interface, Windows 10 Pro and Enterprise users can take advantage of the local Group Policy Editor. It’s a pretty powerful tool, so if you haven’t used it yet, it’s worth taking some time. learn what you can do.
Also, if you are in a company network, do everyone a favor and consult your administrator first. If your work computer is part of a domain, it is also likely to be part of a domain group policy that will replace the local group policy anyway.
You have to, too set a system restore point before continuing. Windows will probably do this automatically when you install the Anniversary Update. However, it wouldn’t hurt to do one manually; That way, if something goes wrong, you can always retire.
First, start the Group Policy Editor by pressing Windows + R, typing «gpedit.msc» in the box, and then pressing the Enter key.
Go to Computer setup> Windows settings> Security settings> Account policies> Password policy.
Once here, locate the «Minimum Password Length» setting and double-click it.
In the properties menu that opens, type the minimum password length that you want to apply and click «OK» when you’re done.
As a bonus, if you want to enable password complexity requirements, you can ask users to create a much more secure password that needs to meet specific criteria. Windows applies these complexity requirements the next time users change or create passwords.
If enabled, passwords must meet the following criteria:
- It does not contain the user’s account name or parts of the user’s full name that exceed two consecutive characters.
- Have at least six characters.
It contains characters from three of the following four categories:
- Uppercase English characters (A to Z).
- Small English characters (from a to z).
- 10-digit base (0-9).
- Non-alphabetic characters (for example,!, $, #,%).
Double-click «Password must meet complexity requirements» to open the properties menu.
When the properties menu opens, click the radio button next to «Enabled» and then select the «OK» button when you’re done.
This is all. You can now close the Group Policy Editor. Changes to this policy take effect immediately and do not require a restart of the device.