Posted by: kurtsh | May 25, 2018

WHITEPAPER: Microsoft Password Guidance

imageDid you know that Microsoft recommends that you don’t set an expiration for end user passwords?

We have a Microsoft research paper that documents our guidelines/recommendations.

This paper provides Microsoft’s recommendations for password management based on current research and lessons from our own experience as one of the largest Identity Providers (IdPs) in the world. It covers recommendations for end users and identity administrators.

Microsoft sees over 10 million username/password pair attacks every day. This gives us a unique vantage point to understand the role of passwords in account takeover. The guidance in this paper is scoped to users of Microsoft’s identity platforms (Azure Active Directory, Active Directory, and Microsoft account) though it generalizes to other platforms.

Download the paper here:


%d bloggers like this: