Intune Android - Devices using BYOD are required to have an 8-Digit Passcode even though the policy requires only 4 digits

Question

Intune Android - Devices using BYOD are required to have an 8-Digit Passcode even though the policy requires only 4 digits

Denis Zivcic 40

Hello!

I am using Intune for our MDM. Some users reported that their Android Device (which is configured using BYOD) requires an 8-Digit Passcode. Our configuration policy only requires 4-Digits though. Can somebody help me point into the right direction?

It only affects BYOD Users (for now)

Thanks!

Matthias Mader 20 Reputation points

2023-01-17T14:03:52.2+00:00
Hi Denis,

your propably running a device with android12 or higher, you have to select password complexity to "low"

pattern, PIN with repeating (4444) or ordered (1234, 4321, 2468) sequences

or "medium"

PIN with no repeating (4444) or ordered (1234, 4321, 2468) sequences, length at least 4

alphabetic, length at least 4

alphanumeric, length at least 4
Matthew Page 1 Reputation point

2023-02-16T18:40:51.9533333+00:00

Hi, I'm seeing the same issue. Did you manage to resolve it? If so how did you do it? Thanks.
Matthias Mader 20 Reputation points

2023-02-19T21:17:57.8833333+00:00

Sure, lower password complexity
Christian M. Schneider 0 Reputation points

2023-06-21T21:29:53.6733333+00:00

We have the same issue. At rollout, a four digit PIN is still accepted, but if the user changes the PIN, an 8 digit PIN is required, although we have set the password complexity to "low".

We use Sony Xperia XQ-CC54 phones with Android 13 in a "personally-owned work profile".

Any ideas what the reason for this behavior could be?
Patrick de Jong 0 Reputation points

2023-09-12T08:12:05.7833333+00:00

Have the same issue. Complexity for Android 12 or later set to medium. Requires 8digit numeric PIN or 6digit password.
Cook, Anissa 0 Reputation points

2025-03-12T18:25:32.91+00:00

I spoke to Samsung last night about this issue per my recent upgrade to the Samsung Galaxy S25 Ultra device. It is currently on Android v15 as of March 2025. So on my phone, I no longer have the option to change the Password complexity to MEDIUM or LOW. Unfortunately, Samsung technician advised me that they removed the option to change the Password complexity. So when I enrolled my phone into my BYOD O365 Intune to set up my Work Profile, it forced me to use an 8-digit PIN to even just unlock my phone. Samsung told me they were going to escalate my case, but we'll see if anything comes of this.

4 answers

Your answer

Matthias Mader 20 Reputation points

2023-01-17T14:03:52.2+00:00

Hi Denis,

your propably running a device with android12 or higher, you have to select password complexity to "low"

pattern, PIN with repeating (4444) or ordered (1234, 4321, 2468) sequences

or "medium"

PIN with no repeating (4444) or ordered (1234, 4321, 2468) sequences, length at least 4

alphabetic, length at least 4

alphanumeric, length at least 4
Matthew Page 1 Reputation point

2023-02-16T18:40:51.9533333+00:00

Hi, I'm seeing the same issue. Did you manage to resolve it? If so how did you do it? Thanks.
Matthias Mader 20 Reputation points

2023-02-19T21:17:57.8833333+00:00

Sure, lower password complexity
Christian M. Schneider 0 Reputation points

2023-06-21T21:29:53.6733333+00:00

We have the same issue. At rollout, a four digit PIN is still accepted, but if the user changes the PIN, an 8 digit PIN is required, although we have set the password complexity to "low".

We use Sony Xperia XQ-CC54 phones with Android 13 in a "personally-owned work profile".

Any ideas what the reason for this behavior could be?
Patrick de Jong 0 Reputation points

2023-09-12T08:12:05.7833333+00:00

Have the same issue. Complexity for Android 12 or later set to medium. Requires 8digit numeric PIN or 6digit password.
Cook, Anissa 0 Reputation points

2025-03-12T18:25:32.91+00:00

I spoke to Samsung last night about this issue per my recent upgrade to the Samsung Galaxy S25 Ultra device. It is currently on Android v15 as of March 2025. So on my phone, I no longer have the option to change the Password complexity to MEDIUM or LOW. Unfortunately, Samsung technician advised me that they removed the option to change the Password complexity. So when I enrolled my phone into my BYOD O365 Intune to set up my Work Profile, it forced me to use an 8-digit PIN to even just unlock my phone. Samsung told me they were going to escalate my case, but we'll see if anything comes of this.

Answer 1

Denis Zivcic 40

For everyone wondering how I fixed this issue:

You have to explicity set the password complexity to "medium".

grafik

Justin G 0 Reputation points

2023-10-17T14:07:37+00:00

I think it's less of "set this to medium" and more of set it to anything other than "None," looks like you were faster at submitting this than I was, but I agree with this solution.
Christian M. Schneider 0 Reputation points

2023-10-18T15:36:51.0133333+00:00

From our own experience and from what @Patrick de Jong commented below, the problem is not fixed by setting it to anything other than "None".

Answer 2

Jordan Millama 1,376

The configuration profile only states the minimum required length of 4, but a length of 4-16 can be used. I am not very familiar with newer Android devices, but this could be a restriction of newer versions of Android not allowing passcodes shorter than 6 or 8 digits.

User's image

Please accept as an answer if this was helpful.

Denis Zivcic 40 Reputation points

2023-01-12T06:37:24.82+00:00

Hi!

We have the exact same configuratin in our MDM

This problem occurs on many different phones. Samsung Galaxy S21 Ultra, Samsung Galaxy S10, Samsung Galaxy FE, Xiaomi Poco F3, ...

It affects some users, not all, even though all users have the same configuration.

Answer 3

Rahul Jindal [MVP] 10,781 MVP

Do you have a MAM policy applied by any chance?

Matthew Page 1 Reputation point

2023-02-16T18:40:13.64+00:00

Hi, I have the same issue and yes, we have a MAM/App Protection policy. Do you know how to resolve the issue?

Answer 4

Context:

The key to this is the Android versions. I encountered this issue after getting a new Android phone, (last phone was a Pixel 5, new one is a Pixel 8 Pro, the Pixel 5 was updated to Android 14 and still had no issues with Intune MDM compliance despite having a 6 character password).

When I went to set up my new phone, despite me still having a 6 character password to unlock my phone, the Company Portal app was forcing me to set up an 8 character password.

Solution (for our environment):

I'm not sure why we all weren't retroactively forced to set up 8 character passwords for our Android devices in my company, but I was able to resolve this issue by doing what Matthias Mader suggested (setting the Android 12 and newer password complexity to Low). My suspicion is that because we had it originally set to "None", Microsoft/Intune was defaulting to High instead for the sake of security, but only applying this to new MDM enrollments. This makes the most sense to me since in November of last year, Google stopped supporting the more granular password complexity/length requirements for BYOD, instead they switched over to what we see for the Android 12 and newer password complexity settings. This timeline matches up pretty well since at my company, we've only run into this issue at the beginning of this year when some people got new Android phones.

In short: If your Android 12 or newer Work Profile Password Complexity is set to None, change it to anything else (Low, Medium, High). After some digging, I found some better information on this available here: https://learn.microsoft.com/en-us/mem/intune/protect/compliance-policy-create-android-for-work#android-12-and-later---for-personally-owned-work-profile

Share via

Intune Android - Devices using BYOD are required to have an 8-Digit Passcode even though the policy requires only 4 digits

4 answers

Your answer