Check for expired Microsoft account password

Information

There currently is not an option to show expired passwords for Microsoft 365 directly. Instead, an admin must check the last time a password was changed and compare with the expiration policy. A report may be automatically generated with Administrator PowerShell access. An example script (downloads a file) is provided by a Admindroid (opens in a new window) in their article (opens in a new window).

Environment

• Microsoft 365
• Microsoft Entra
• Microsoft Admin

Process

Get Date of Last Password Change

1. Navigate to the Microsoft Entra admin center homepage (opens in a new window)
2. Click  Users in the left navigation pane
3. Click All users
4. Click the search field next to the Add filter to look up a specific user
5. Click the desired user under Display name
6. Click Properties
7. Compare the Last password change date time with the Password expiration policy

Get Password expiration policy

1. Navigate to the Microsoft 365 admin center homepage (opens in a new window) 
2. Click Show all in the left navigation pane to expand more settings
3. Click the Security tab
4. Click Password expiration policy
5. If a policy has been set it will appear under Days before passwords expire