To get that configured, you will need to launch PowerShell and connect up to Office 365. These are typically very restricted accounts that can only do one or two things. Optionally configure when users are notified about their passwords that will soon expire.įor some accounts, like service accounts or logins used by multifunction devices to e-mail and save copies of documents scanned or faxed in, you might want to let those passwords never expire.

For most organizations I recommend this be no longer than 90 days, although if you have two factor authentication enabled you can get away with longer periods of time without compromising your overall security profile too much. Type in the number of days for a password to be valid.Sign in to the Office 365 administrative center and go to Settings / Security and Privacy.Here’s how you can change the expiration day value:

The expiration period may be increased maximum to 730 days, but this practice is not advised as it may cause serious security risks to business-critical data. Rule #1: Stay on Top of Password Expirationīy default, the password expiration period is set for 90 days. In this blog post, I’ll highlight a few rules that should be helpful for IT admins when ensure Office 365 password policy security. But still, you should align Office365 security settings with your overall enterprise security profile and posture. Password policy in Office 365 is much stricter and more secure than that of an on-premises application, so you no longer have to worry about setting and enforcing different authentication policies for your users.

Password reset office 365 self service