Recorded 14 Oct 2026 at 10:19 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position. See the latest record.
User passwords will be restricted to 256 characters.
Effective date: March 13, 2020 Endpoints impacted: All Protocol impacted: All user flows. Users with passwords longer than 256 characters who sign in directly to Microsoft Entra ID (not a federated IDP, like AD FS) will be asked to change their passwords before they can sign in. Admins may receive requests to help reset the user's password. The error in the sign-in logs will be similar to AADSTS 50052: InvalidPasswordExceedsMaxLength. Message: The password entered exceeds the maximum length of 256. Please reach out to your admin to reset the password. Remediation: The user is unable to log in because their password exceeds the permitted maximum length. They should contact their admin to reset the password. If SSPR is enabled for their tenant, they can reset their password by following the "Forgot your password" link.
What it said
- Published
- 1 Mar 2020
- Product
- Microsoft Entra
Recorded links
What changed
First observed 14 Oct 2026No field changes in the recorded history.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.