How to change the password expiration date in Windows 11

Have you encountered the annoying message that your password is about to expire in Windows 11 ? Many users, whether for privacy, security, or simple convenience, want to modify how often they are required to change their password or even disable expiration altogether. Understanding your password expiration settings can save you from unpleasant surprises and even prevent unexpected account lockouts.

In this comprehensive article, you'll discover all the available options for changing your password expiration date in Windows 11 , whether you use a local account, a Microsoft account, are part of a domain, or have one of the various editions of the system. We'll review detailed instructions, warnings, and alternatives so you can tailor your security to your specific needs, while keeping in mind the best practices recommended by cybersecurity experts.

Why do passwords expire in Windows 11?

Periodic password expiration is a long-standing policy in Windows systems, especially in professional environments. Its main purpose is to force users to update their passwords regularly , thus making it more difficult for potential attackers to obtain them through brute-force techniques or by stealing old data.

However, according to the latest security studies, forcing frequent password changes can be counterproductive . Many users end up choosing weaker passwords, reusing old ones, or following predictable patterns. Therefore, it is currently advisable to complement or even prioritize other measures, such as multi-factor authentication, over a strict password expiration policy.

Even so, Windows 11 retains the option to configure when passwords expire . By default, it's usually disabled for home accounts, but for business or educational accounts, it may be configured with a specific period, typically between 30 and 90 days.

Differences depending on the user type and version of Windows 11

Before you attempt to change your password's expiration date, it's crucial to identify your account type and the edition of Windows 11 you're using. Why? Because the steps and options vary depending on whether you have a local account, a Microsoft account (email address), are part of a domain (Active Directory), or are using a Home, Professional, Enterprise, or Education edition.

• Local account: This is a typical user account that doesn't rely on a Microsoft email account. You can manage the expiration date from your own computer.
• Microsoft account: If you log in with your Microsoft email (Hotmail, Outlook, etc.), the expiration is mainly managed online from your account website.
• Business domains: If your computer is joined to a domain (Active Directory), policies are up to system administrators.
• System Edition: Windows 11 Home does not include some advanced tools to modify the expiration; however, there are alternatives via the online helpline. commands.

How long is it recommended to set the expiration date?

Microsoft suggests that a password should last between 30 and 90 days . While you can choose from 1 to 999 days, it's always advisable to tailor it to your needs and level of exposure. For personal accounts, frequent password changes are usually unnecessary , but in professional or educational settings, it's good practice to maintain some control.

How to check and change password expiration in Windows 11

We explain step by step how to view and change password expiration, breaking down the process by account type and system edition.

For local accounts on Windows 11 Professional, Enterprise, and Education

1. Access user management: Press Windows + R and type lusrmgr.msc. Press Enter.
2. Find the user: In the left column, click “Users” and select your username on the right.
3. Modify the expiration: Right-click on the user and select “Properties.” Check or uncheck the box. 'The password never expires'If you check this box, you will never be asked to change your password.

This method is quick and easy, but you'll only find it in the Professional, Enterprise, and Education editions . If you're using the Home edition, keep reading.

For Windows 11 Home and local accounts without access to lusrmgr.msc

• Using command line as administrator:
  • Press the Windows key, type CMD, right click on “Symbol of the system” and select “Run as administrator”.
  • To disable password expiration run:
    net accounts /maxpwage:unlimited
  • If you prefer to set a number of days (between 1 and 999), run for example:
    net accounts /maxpwage:60 (this requires changing your password every 60 days)

With this, you will have control over when Windows requires you to update your product key.

Modify the validity using PowerShell

If you prefer or need to use PowerShell , the commands are virtually identical. Open PowerShell as administrator and run the command above according to your preference.

Another alternative for any version: WMIC

• Open the terminal as administrator (CMD or PowerShell).
• Run:
  wmic path Win32_UserAccount WHERE Name='your_user' set PasswordExpiries=false
  Replace 'your_user' with the exact name of your Windows user.

This command disables expiration for a specific user . If you set it back to "true", it will expire again according to the established policy.

Using the Local Group Policy Editor (gpedit.msc)

One of the most powerful options in the Professional, Enterprise, and Education editions is the Local Group Policy Editor . Here you can set not only the maximum password age, but also advanced password options.

1. Press Windows + R, type gpedit.msc and hit Enter.
2. Browse by:
   Computer Configuration → Windows Settings → Security Settings → Account Policies → Password Policy
3. double click on Maximum password lifetime and set the number of days you prefer. The default is usually 42 days.
4. You can configure other options such as minimum length, requiring password history, etc.

Don't have gpedit.msc? You're probably using the Home edition. In that case, use the commands shown previously.

How does expiration work on Microsoft accounts?

If your Windows user logs in using a Microsoft email address, password expiration is controlled online :

1. Accede to https://account.microsoft.com and log in.
2. Go to section Security and then to Change Password.
3. You will find the option 'Make me change my password every 72 days'. Activate or deactivate it according to your preferences and click save.
4. This setting only affects Microsoft accounts, not local accounts.

Configuration on computers within a domain (companies/organizations)

In businesses, schools, and other domain-based environments, the expiration date is determined by the system administrator through group policies (GPOs) in Active Directory:

1. The administrator modifies these policies from the administration console (gpmc.msc) on the Default Domain Policy.
2. You can set the maximum password age, the history of previous keys, minimum length, and other security parameters.
3. The changes apply to all users in the domain, and in some cases, users may not be able to modify the expiration themselves.

If you have any questions, please contact your organization's technical support.

Related articles:

How to change a local account password in Windows 11

Isaac

Passionate writer about the world of bytes and technology in general. I love sharing my knowledge through writing, and that's what I'll do on this blog, show you all the most interesting things about gadgets, software, hardware, tech trends, and more. My goal is to help you navigate the digital world in a simple and entertaining way.