Windows Password Expiration Warning Registry Key

This article explains how to configure the user account password expiration warning in Windows using the Registry Editor (Regedit). You will learn the exact registry path, the specific value responsible for controlling advance warning notifications, and the step-by-step process for customizing the notification period before a user’s password expires.

The Specific Registry Entry

The behavior of password expiration warnings in Windows is governed by the PasswordExpiryWarning value located within the Winlogon registry key.

• Registry Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
• Value Name: PasswordExpiryWarning
• Value Type: REG_DWORD (32-bit Value)
• Value Data: The number of days before expiration that the warning prompt appears (default is typically 5 days).

How to Modify the Warning Period via Regedit

1. Press Win + R, type regedit, and press Enter to open the Registry Editor.
2. Navigate to the following key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
3. In the right pane, locate the PasswordExpiryWarning value.
   • Note: If this value does not exist, right-click the empty space in the right pane, select New > DWORD (32-bit) Value, and name it PasswordExpiryWarning.
4. Double-click PasswordExpiryWarning.
5. In the Value data field, select the Decimal radio button.
6. Enter the number of days (e.g., 14 for two weeks) you want the operating system to warn users before their password expires.
7. Click OK and close the Registry Editor.

Once configured, Windows will display a prompt during interactive logon notifying the user that their password will expire in the specified number of days. Setting this value to 0 disables the advance expiration warning entirely.