For your security, Microsoft already requires a minimum password length for all Microsoft accounts. If you want to strengthen all local accounts, you can set a minimum password length for each user on Windows 1
By default, when you create a new local user on Windows 10, the account does not require a password. However, if you want to implement a minimum password length for everyone, there are a number of ways to apply this requirement for the security of your computer.
Home users: set a minimum password length via the command line
First, you must run an elevated instance of the command prompt. If you prefer to use PowerShell, you can also use it. The following command works pretty much the same for both programs & # 39; s, but click "Run as administrator" if you choose to use PowerShell.
Click the Start button, type "cmd" in the search box, right-click the "Command Prompt" result, and then select "Run as administrator."
At the prompt, type the following command (replace "PassLength" with the minimum password length that you want to apply):
net accounts / minpwlen: PassLength
Press Enter and a prompt will appear with the notification that the job has been completed.
Note: Although you can technically choose everything from 1-20 characters long, try to choose something that is sufficient provides security and it also does not make it difficult for users to remember their passwords.  If you want to check whether it has been applied, type the following command and press Enter to check:
To remove the minimum password length, type the following command to remove mandatory passwords for local accounts:
net accounts / minpwlen: 0
To make your accounts even more secure, you can set a maximum password age, which allows users to generate a new password over time.
RELATED: Set an expiration date for a password in Windows 10
Pro and Enterprise users: set a minimum password length via Group Policy
For anyone who does not want to mess with the command prompt or if you feel more comfortable with a graphical interface, Windows 10 Pro and Enterprise users can benefit from the Local Group Policy Editor. It's a pretty powerful tool, so if you've never used it before, it's worth taking some time to learn what it can do.
Also, if you are on a corporate network, do everyone a favor and contact your admin first. If your work computer is part of a domain, it is also likely that it is part of a domain group policy that at least replaces the local group policy.
You must also create a system restore point before continuing. Windows will probably do this automatically when you install the Anniversary Update. Yet it can't hurt to create one manually – that way you can always roll back if something goes wrong.
First, start the Group Policy Editor by pressing Windows + R and type "gpedit.msc" in the box, and then press Enter.
Navigate to Computer Configuration> Windows Settings> Security Settings> Account Policy> Password Policy.
Find the "Minimum password length" setting here and double click on it.
From the properties menu that opens, type the minimum password length that you want to apply and click "OK" when you are finished.
As a bonus, if you want to enable the password complexity requirements, you can let users create a much more secure password that must meet specific criteria. Windows maintains these complexity requirements the next time users change or create passwords.
If enabled, passwords must meet the following criteria:
- No user account name or parts of the user's full name must be longer than two consecutive characters.  At least six characters long.
- Contains characters from three of the following four categories:
- English capital letters (A to Z).
- English lowercase letters (a to z). Basic 10 digits (0 to 9).
- Non-alphabetical characters (for example !, $, #,%).
Double-click "Password must meet complexity requirements" to open the property menu.
When the properties menu opens, click the radio button next to "Enabled" and then select the "OK" button when done.
That's all there is to it. You can now close the Group Policy Editor. Changes to this policy become effective immediately and do not require a restart of your device.