Security Policy Errors

When Does a Microsoft 365 Password Expiration Policy Take Effect?

Steve KSteve K Nov 3, 2026 869 views

Question details

The user wants to know the exact effective timeline for newly implemented Microsoft 365 password expiration policies, specifically whether existing passwords will expire immediately upon applying the policy.

When Does a Microsoft 365 Password Expiration Policy Take Effect?
Product
Microsoft 365
Device & OS
not provided
Scenario
An administrator configures a new 90-day password expiration policy for Microsoft 365 users and needs to understand its immediate impact on current accounts.
Observed behavior
Users can continue using their current passwords for up to 90 days from the date the new policy is applied, rather than being forced to change them immediately.
Before you start

Before altering password policies, ensure you have Global Administrator privileges in the Microsoft 365 admin center and communicate the upcoming timeline to your organization to prevent unexpected login issues.

Solution 1Recommended

Understanding the Password Policy Effective Date

Learn how the expiration timer applies to existing user accounts when a new Microsoft 365 password policy is enforced.

When you apply a password expiration policy for the first time, it takes effect from the exact date the change is made in the admin center.

For example, if you set a 90-day expiration period today, the system starts counting from today's configuration date. Existing passwords will not expire immediately, giving your users a full 90 days from this change date to update their credentials.

1
Apply the policy in the Admin Center

Navigate to the Microsoft 365 admin center, go to 'Settings', then 'Org settings', and select the 'Security & privacy' tab to configure the Password expiration policy.

2
Note the configuration date

Record the date you saved the new policy. The 90-day countdown for all existing users begins on this exact date.

3
Notify your users

Inform your employees that they have 90 days from the policy activation date to change their passwords before they are prompted during login.

Understanding the Password Policy Effective Date
No Immediate Lockouts: Setting a new expiration policy does not force an immediate password reset for active sessions or currently valid credentials.
Free Microsoft Office alternative

Discover a Lightweight and Free Alternative to Microsoft Office

While you manage cloud administration policies like Microsoft 365 password expiration, you might also need a fast, reliable desktop office suite. WPS Office provides excellent compatibility with standard document formats without complex subscription management.

  1. 1. Download WPS Office: Visit the official WPS Office website and download the free installer for your operating system.
  2. 2. Install the application: Run the downloaded setup file and follow the straightforward on-screen instructions to complete the installation.
  3. 3. Open your Microsoft files directly: Launch WPS Office and instantly open, edit, or save your existing Microsoft Word, Excel, and PowerPoint files without any formatting loss.
Highly compatible with Microsoft Office formats including DOCX, XLSX, and PPTX.Free to use with a lightweight, fast installation that doesn't drain system resources.Familiar user interface makes employee migration and onboarding seamless.Built-in PDF reader and editor for comprehensive daily document management.
microsoft office alternative - wps office

Frequently Asked Questions

How do I configure the password expiration policy in Microsoft 365?

Log in to the Microsoft 365 admin center with a global admin account. Go to Settings > Org settings > Security & privacy, and select 'Password expiration policy'. Check the box to set passwords to expire, enter the desired number of days, and save your changes.

Will users be notified before their password expires?

Yes, Microsoft 365 can notify users automatically. When setting up the expiration policy, you can specify the number of days prior to expiration that users will start receiving update prompt notifications.

Can I set passwords to never expire for specific user accounts?

Yes. While the global policy applies to the entire organization, you can use Microsoft Graph PowerShell or the Azure Active Directory module to set individual accounts, such as critical service accounts, to have non-expiring passwords.