ActivePasswords

WizardSoft ActivePasswords is a lightweight yet powerful utility for enforcing password strength in Microsoft Active Directory. The installer is just 1.14 MB, but the tool delivers full customization and fine-grained control over password complexity requirements. With ActivePasswords, administrators can centrally define and manage multiple password policies and apply them to specific security groups or organizational units. This makes it easy to align Active Directory password enforcement with organizational security needs. ActivePasswords also supports compliance with NIST SP 800-63 password guidelines, helping organizations strengthen security without disrupting existing Windows infrastructure and at a fraction of the cost of heavier solutions

With ActivePasswords you control the exact complexity requirements that must be met when a domain password is changed or reset. All settings are centrally managed through Group Policy.

Different password policies can be applied to specific Active Directory security groups or organizational units. For example, in a school environment, students can be assigned simpler password rules, while teachers and staff are required to use stronger ones.

ActivePasswords integrates with Windows Fine-Grained Password Policies but consolidates all configuration into a single location—the Group Policy Management Console—making administration simpler and more consistent.

ActivePasswords Settings (all optional)

ActivePasswords gives administrators full control over password complexity rules. All settings are centrally managed and can be applied flexibly per security group or organizational unit. Available options include:

• Length & structure

  • Minimum and maximum password length

  • Minimum number of words (enforce passphrases)

  • Minimum number of character categories (uppercase, lowercase, digits, symbols)

• Character rules

  • Minimum uppercase letters

  • Minimum lowercase letters

  • Minimum special characters (e.g. @, %)

  • Maximum repeated characters (prevents Aaaaaaa1)

  • Maximum sequential characters (prevents 1234Dcba)

  • Disallow spaces

  • Disallow vowels (a, e, i, o, u)

  • Only allow specified characters

  • Forbid specific characters

• Content restrictions

  • Must not contain parts of the username, first name, or last name

  • Must not contain custom forbidden words (loaded from UTF-8 file or Group Policy)

  • Detects obfuscations/alterations of forbidden words or names

  • Dictionary check: supports lists with tens of thousands of words; words cannot exceed a configurable percentage of the password (e.g. myPassword12 fails if password is blacklisted)

• Advanced validation

  • Regular expression validation (e.g. abC passes [a-z]b[A-Z]; abc does not)

  • Validate at both password change and reset events

  • Integration with Have I Been Pwned for compromised password checks

• Policy enforcement

  • Customizable password change policies

  • Password lockout policies

ActivePasswords Rule Example

A typical policy might require that:

• The password includes at least two character categories (e.g. uppercase + lowercase, or lowercase + number).

• It must not contain the username, first name, or last name.

• It is at least 8 characters long.

• It must not contain common words such as password, welcome, login, or company—nor obfuscated variants like P@ssw0rD.

• Validation is enforced at both password change and reset events.

Simple Installation

Deploying ActivePasswords is straightforward: install it on each Domain Controller (Windows Server 2008 R2, 2012 R2, 2016, 2019, and 2022 are fully supported), reboot once, configure your Group Policies, and you’re done. No client-side installation is required.

Licensing

ActivePasswords is licensed per enabled and targeted Active Directory user, on a subscription basis. Each subscription includes usage rights, updates, and e-mail support for one year. Pricing starts at $2.20 (€1.90) per user per year (minimum 50 licenses required).

Educational institutions are eligible for substantial discounts. To inquire, contact us via e-mail using your campus address.

Download Trial
QuickStart Manual

Please contact us via info@wizardsoft.nl should you have any questions or suggestions!