How to Request a Longer Minimum Password Length in Azure
Question details
Administrators need a way to enforce a minimum password length of 12 or more characters in Azure, which is currently limited by the platform's default policies.

- Product
- Microsoft Azure
- Device & OS
- not provided
- Scenario
- Enforcing stricter security compliance standards such as NIST, ISO, and GDPR for user passwords within the organization.
- Observed behavior
- The platform's current default password policy prevents administrators from natively setting a minimum password length of 12 or more characters for cloud users, requiring manual feature requests.
Gather specific compliance frameworks (such as NIST, ISO, or GDPR guidelines) and internal security mandates to include as supporting evidence for your feature request.
Submit or Vote for a Feature Request on the Azure Feedback Portal
The most effective way to influence Azure's password policy limits is to submit a well-documented feature request to the Microsoft product team.
Microsoft's product teams actively monitor the Azure feedback portal for user suggestions. Highlighting specific compliance needs like GDPR or NIST standards significantly increases the likelihood of the feature being prioritized for future updates.
Navigate to the official Microsoft Azure Feedback Portal in your web browser.
Use the search bar to look for terms like "minimum password length" to see if another administrator has already submitted a similar request. If so, click the "Vote" button to add your support.
If no existing request matches your specific requirements, click the "Post a new idea" button to start drafting your own request.
In the description field, explicitly state that your organization requires a minimum password length of 12 or more characters to meet critical security, NIST, ISO, GDPR, and client-compliance requirements.

Looking for a Secure and Free Office Alternative?
While you manage your Azure security and compliance policies, consider WPS Office as a secure, lightweight, and highly compatible alternative to Microsoft Office for your organization's daily document workflows.
- 1. Download WPS Office: Visit the official WPS website and download the free installation package for your operating system.
- 2. Install the Software: Run the installer and follow the on-screen instructions to set up WPS Office on your device.
- 3. Secure Your Documents: Open any document, spreadsheet, or presentation and use the built-in encryption tools to set robust password protection.

Frequently Asked Questions
Why is Azure's default minimum password length restricted?
Microsoft Entra ID (formerly Azure AD) maintains a default password policy designed to balance account security with usability. However, evolving corporate compliance standards often push organizations to seek longer minimum lengths than the default allows.
Can on-premises Active Directory enforce longer passwords in Azure?
Yes. If your organization uses Azure AD Connect with Password Hash Synchronization (PHS) or Pass-through Authentication (PTA), your stricter on-premises Active Directory password policies (including longer lengths) will apply to synced users.
Are there other ways to improve Azure authentication security without longer passwords?
While waiting for a password policy update, you can drastically improve security by implementing Multi-Factor Authentication (MFA), Conditional Access policies, and Microsoft Entra ID Protection to safeguard user identities.




