Minimum password requirements for Active Directory and Office 365
- Password cannot contain the user's account name or parts of the user's full name that exceed two consecutive characters.
- Example: If the user's name is Allen, the password cannot contain "all" or "len" or "lle"
- Be at least eight characters in length
- Contain characters from three of the following four categories:
- English uppercase characters (A through Z)
- English lowercase characters (a through z)
- Base 10 digits (0 through 9)
- Non-alphabetic characters (for example, !, $, #, %)
- Password cannot be any of the last 24 passwords used
Complexity requirements are enforced when passwords are changed or created.