---
id: 3737
title: "Password Policy GPO"
source_domain: projectblack.io
source_url: "https://projectblack.io/blog/password-policy-gpo/"
published_at: "2025-07-07 05:25"
tags: ["active-directory", "nist", "hardening", "password-policy", "gpo"]
phying_url: "https://phying.com/item/3737"
lang: en
---

# Password Policy GPO

## Summary

After cracking ~40% of passwords in AD environments, the post recommends disabling forced expiry (max age 0), raising minimum length toward 16, and passphrase training — cutting crack rates to ~5%.

## Intelligence Metadata

- **Sources:** projectblack.io
- **Published:** 2025-07-07 05:25
- **Original:** https://projectblack.io/blog/password-policy-gpo/
- **Phying News:** https://phying.com/item/3737