topic Passwordless and password changes in Managing Users

Passwordless and password changes

doGlooPA — Mon, 20 Apr 2026 14:35:17 GMT

Hello,
I am currently testing Duo passwordless and my password expired last week. In the past, as long as we were connected to our VPN while changing the password, everything synced up from local Windows to Active Directory with no issues. Today, I didn't have great luck with that. It seems my local (passwordless) login is not getting updated when I change my AD creds. So if I restart I will still need to use my old password until I come on site to a location. Any documentation or advice on how the local AD credentials are handled when passwordless is enabled?

Re: Passwordless and password changes

Philip D'Ath — Mon, 20 Apr 2026 20:44:12 GMT

That's a tough one, as I don't think there is any support for that case. Passwordless saves your AD password locally, so it wouldn't know that it has changed.

Maybe it's time to review the password expiration policy, with major movers updating their policies, such as NIST 2024 Password Guidelines and the Microsoft Password Policy, both of which recommend not to expire users' passwords (aka, don't make users rotate their passwords).

NIST Password Policy Guidelines 2024: What You Need to Know

Re: Passwordless and password changes

doGlooPA — Mon, 20 Apr 2026 21:00:46 GMT

Password changes are still required for certain environments but I hear what you are saying. I ended up running this from a command prompt: "runas /user:domain\username cmd.exe" and that prompted me for my updated credentials and that seemed to update them locally. Or, it was just a matter of waiting a length of time but it seemed to work eventually. I will post any updates if I run into them as we continue to test larger groups. Thanks!