Why does MS choose 72 days for password expiration?

lx07 · 27 Jun 2017

Just saw this tutorial and didn't want to hijack it with OT query: Enable or Disable Password Expiration for Your Microsoft Account Windows 10 User Accounts Tutorials

You have the option to force your MSA password to expire every 72 days. No other length of time just 72 days or not.

Why 72 though? It isn't a round number of weeks or months and yet it seems to have been this particular duration for at least a decade. For example there is this How do I change my MSN Hotmail password? - Ask Dave Taylor from 2007.

Any ideas why? Just curious really.

Brink · 27 Jun 2017

I don't see anything for an official reason why, but I guess that it's just how often Microsoft feels (based on studies??) is the minimum recommendation you should change your password.

It would be nice to have an option to specify your own time frame instead though.

Mystere · 27 Jun 2017

Research shows that asking users to change their password every 71 days or less leads to lynch mobs looking for system administrators