Set a user's password expiration policy

User passwords expire on a regular basis in Office 365. As an admin, you can make the user's password expire after a certain number of days. You can also change the number of days before users are notified of password expiration.

 Note    Prior to November 1st 2013, the Office 365 portal could only set the password policy in the default onmicrosoft.com domain. You can now use the Office 365 portal to make password policy changes to all domains. If you made password policy changes prior to November 1st, we recommend that you set the policy again to apply the policy to all of your custom domains.

  1. Go to Service settings > Passwords.
  2. Type the number of days before the password should expire. Choose a number of days from 14 to 730.
  3. Type the number of days before users are notified that their password will expire, and then click Save. Choose a number of days from 1 to 30.

More about passwords and password expiration policies

  • How can I set the password to never expire? Use the Microsoft Online Services Module for Windows PowerShell to set up user passwords to never expire. Setting passwords to never expire is only recommended for service accounts, such as the account used for Active Directory synchronization. For more information, see Set up user passwords to never expire.
  • How many days should I choose? Many organizations require new passwords every two or three months. Choose a number of days from 14 to 730.
  • How are users notified that their password will expire? Users see a message whenever they sign in, starting at the number of days before password expiration that you specified. The message shows the number of days left before the password expires and gives a link to the Change password page. For more information, see Change your password.
  • What if users don’t change their password in time? Users can still change their password after it has expired. The Update password page displays when they sign in, and they can enter a new password. You can also reset their password for them, if necessary. For more information, see Change your password or Reset a user's password.
  • What if I want to change password policy for accounts that are synchronized with Active Directory? Password policy can only be set using the steps in this article for accounts that aren’t synchronized through Active Directory synchronization. To learn more about Active Directory synchronization, see Directory integration for Microsoft Azure Active Directory.
 
 
Applies to:
Office 365 Enterprise admin, Office 365 Midsize Business admin