Compliance/WHfB Password (PIN) Discrepancy

[BobaFett163978]

Thank you for all the great work. For "Win - OIB - Compliance - U - Password - v3.1", why is the password length set to 8 characters, and in "Win - OIB - ES - Windows Hello for Business - D - WHfB Configuration - v3.2" it is set to 6?

[incedIT]

I’m pretty sure it’s so passwords are 8+ characters but WHfB pins can be 6 digits. Pins are local to the device and rate limited so it’s not as important for them to be so long or complex.

It allows you to have long complex passwords protecting the cloud accounts without impacting users trying to sign in, with Passwordless they don’t even need to know their password so can help protect against phishing.