{"id":244,"date":"2019-04-25T16:35:51","date_gmt":"2019-04-25T23:35:51","guid":{"rendered":"https:\/\/www.karlstechnology.com\/blog\/?p=244"},"modified":"2019-04-26T16:42:56","modified_gmt":"2019-04-26T23:42:56","slug":"passwords-in-windows-are-changing","status":"publish","type":"post","link":"https:\/\/www.karlstechnology.com\/blog\/passwords-in-windows-are-changing\/","title":{"rendered":"Passwords in Windows are changing"},"content":{"rendered":"\n

Microsoft has published a draft security revision<\/a> for Windows 10 version 1903 (May 2019 Update) that changes security requirements for Windows 10 desktop users and Windows Server 2016 \/ Windows Server 2019 (read the new draft at https:\/\/blogs.technet.microsoft.com\/secguide\/2019\/04\/24\/security-baseline-draft-for-windows-10-v1903-and-windows-server-v1903\/<\/a> ). <\/p>\n\n\n\n

The biggest change in the draft security revision is that Microsoft is dropping the password expiration policy. Previously, Microsoft had set the default password expiration period at 90 days.<\/p>\n\n\n\n

Microsoft explained the purpose behind changing the password expiration policies in the draft security revision:<\/p>\n\n\n\n


When humans pick their own passwords, too often they are easy to guess or predict. When humans are assigned or forced to create passwords that are hard to remember, too often they\u2019ll write them down where others can see them. When humans are forced to change their passwords, too often they\u2019ll make a small and predictable alteration to their existing passwords, and\/or forget their new passwords. <\/p>Microsoft TechNet<\/a><\/cite><\/blockquote>\n\n\n\n

Which makes perfect sense. The purpose of password expiration policies are to force password changes assuming that someone’s password will frequently be compromised. If a password never gets compromised, there is no need to change the password regularly. <\/p>\n\n\n\n

There are a handful of other important changes coming in the May 2019 Update of Windows 10. Some of the more notable changes are:<\/p>\n\n\n\n