For everyone wondering how I fixed this issue:
You have to explicity set the password complexity to "medium".
Intune Android - Devices using BYOD are required to have an 8-Digit Passcode even though the policy requires only 4 digits
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(96, 24%, 19%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDZ%3C/text%3E%3C/svg%3E)
Denis Zivcic
40
Reputation points
Hello!
I am using Intune for our MDM. Some users reported that their Android Device (which is configured using BYOD) requires an 8-Digit Passcode. Our configuration policy only requires 4-Digits though. Can somebody help me point into the right direction?
It only affects BYOD Users (for now)
Thanks!
Microsoft Security | Intune | Security
Microsoft Security | Intune | Microsoft Intune Android
Microsoft Security | Intune | Other
{count} votes
-
Matthias Mader 20 Reputation points2023-01-17T14:03:52.2+00:00 Hi Denis,
your propably running a device with android12 or higher, you have to select password complexity to "low"
- pattern, PIN with repeating (4444) or ordered (1234, 4321, 2468) sequences
or "medium"
- PIN with no repeating (4444) or ordered (1234, 4321, 2468) sequences, length at least 4
- alphabetic, length at least 4
- alphanumeric, length at least 4
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(92.8, 92%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMP%3C/text%3E%3C/svg%3E)
Matthew Page 1 Reputation point2023-02-16T18:40:51.9533333+00:00 Hi, I'm seeing the same issue. Did you manage to resolve it? If so how did you do it? Thanks.
-
Matthias Mader 20 Reputation points
2023-02-19T21:17:57.8833333+00:00 Sure, lower password complexity
-
Christian M. Schneider 0 Reputation points2023-06-21T21:29:53.6733333+00:00 We have the same issue. At rollout, a four digit PIN is still accepted, but if the user changes the PIN, an 8 digit PIN is required, although we have set the password complexity to "low".
We use Sony Xperia XQ-CC54 phones with Android 13 in a "personally-owned work profile".
Any ideas what the reason for this behavior could be?
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(310.4, 83%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPD%3C/text%3E%3C/svg%3E)
Patrick de Jong 0 Reputation points2023-09-12T08:12:05.7833333+00:00 Have the same issue. Complexity for Android 12 or later set to medium. Requires 8digit numeric PIN or 6digit password.
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(192, 17%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECA%3C/text%3E%3C/svg%3E)
Cook, Anissa 0 Reputation points2025-03-12T18:25:32.91+00:00 I spoke to Samsung last night about this issue per my recent upgrade to the Samsung Galaxy S25 Ultra device. It is currently on Android v15 as of March 2025. So on my phone, I no longer have the option to change the Password complexity to MEDIUM or LOW. Unfortunately, Samsung technician advised me that they removed the option to change the Password complexity. So when I enrolled my phone into my BYOD O365 Intune to set up my Work Profile, it forced me to use an 8-digit PIN to even just unlock my phone. Samsung told me they were going to escalate my case, but we'll see if anything comes of this.
Sign in to comment
5 answers
Sort by: Most helpful
-
Denis Zivcic 40 Reputation points
2023-10-17T12:53:43.0133333+00:00 -
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(89.60000000000001, 37%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJG%3C/text%3E%3C/svg%3E)
Justin G 0 Reputation points2023-10-17T14:07:37+00:00 I think it's less of "set this to medium" and more of set it to anything other than "None," looks like you were faster at submitting this than I was, but I agree with this solution.
-
Christian M. Schneider 0 Reputation points
2023-10-18T15:36:51.0133333+00:00 From our own experience and from what @Patrick de Jong commented below, the problem is not fixed by setting it to anything other than "None".
Sign in to comment -
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(156.8, 75%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EG%3C/text%3E%3C/svg%3E)
gofletchgo 15 Reputation points2025-10-01T14:41:28.2166667+00:00 Hello, I have Samsung S25 running Android 16 and have this issue. However, when I have the Work Profile set up, changing the complexity is no longer an option from what I can see in my phone. When I go into my settings and click Screen Lock, PIN, all that I am allowed to do is change the PIN itself as long as it is 8 digits. I am not allowed to change the complexity level, which is set to Medium-High once the Work Profile is set up. My work does NOT require a PIN longer than 4 digits. If I uninstall the Work Profile then it will allow a 4 digit PIN. Has anyone with A16 found a solution to this or is Samsung Knox working to change this for work profiles?
-
Cook, Anissa 0 Reputation points
2025-10-01T15:06:29.5366667+00:00 I asked Samsung to add this to their suggestion list and they said they have it as feedback, but this was many months ago earlier this year. I have not seen nor heard anything since. I've just been using an 8-digit PIN which is still a bit of an inconvenience.
-
gofletchgo 15 Reputation points
2025-10-03T12:55:10.6333333+00:00 I did end up talking to a Samsung Knox representative (obviously not InTune) and he said that my company will have to go into their InTune settings to modify the "complexity" to allow "low". I've made that request to my IT department again to see what they say. Will update on if that was successful or not.
-
Cook, Anissa 0 Reputation points
2025-10-03T14:06:13.6533333+00:00 I tried that on my end and my company told me that they didn't even have any restrictions like that for our InTune here. That's when I reached back out to Samsung and they said this was a security change with the latest OS that came on my S25 Ultra. I may try to reach out again.
Sign in to comment -
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(32, 96%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJM%3C/text%3E%3C/svg%3E)
Jordan Millama 1,391 Reputation points2023-01-11T14:36:28.79+00:00 The configuration profile only states the minimum required length of 4, but a length of 4-16 can be used. I am not very familiar with newer Android devices, but this could be a restriction of newer versions of Android not allowing passcodes shorter than 6 or 8 digits.
Please accept as an answer if this was helpful.
-
Denis Zivcic 40 Reputation points
2023-01-12T06:37:24.82+00:00 Hi!
We have the exact same configuratin in our MDM
This problem occurs on many different phones. Samsung Galaxy S21 Ultra, Samsung Galaxy S10, Samsung Galaxy FE, Xiaomi Poco F3, ...
It affects some users, not all, even though all users have the same configuration.
Sign in to comment -
-
Rahul Jindal 11,416 Reputation points2023-01-17T18:21:58.53+00:00 Do you have a MAM policy applied by any chance?
-
Matthew Page 1 Reputation point
2023-02-16T18:40:13.64+00:00 Hi, I have the same issue and yes, we have a MAM/App Protection policy. Do you know how to resolve the issue?
Sign in to comment -
-
Justin G 0 Reputation points
2023-10-17T14:01:17.0966667+00:00 Context:
The key to this is the Android versions. I encountered this issue after getting a new Android phone, (last phone was a Pixel 5, new one is a Pixel 8 Pro, the Pixel 5 was updated to Android 14 and still had no issues with Intune MDM compliance despite having a 6 character password).
When I went to set up my new phone, despite me still having a 6 character password to unlock my phone, the Company Portal app was forcing me to set up an 8 character password.
Solution (for our environment):
I'm not sure why we all weren't retroactively forced to set up 8 character passwords for our Android devices in my company, but I was able to resolve this issue by doing what Matthias Mader suggested (setting the Android 12 and newer password complexity to Low). My suspicion is that because we had it originally set to "None", Microsoft/Intune was defaulting to High instead for the sake of security, but only applying this to new MDM enrollments. This makes the most sense to me since in November of last year, Google stopped supporting the more granular password complexity/length requirements for BYOD, instead they switched over to what we see for the Android 12 and newer password complexity settings. This timeline matches up pretty well since at my company, we've only run into this issue at the beginning of this year when some people got new Android phones.
In short: If your Android 12 or newer Work Profile Password Complexity is set to None, change it to anything else (Low, Medium, High). After some digging, I found some better information on this available here: https://free.blessedness.top/en-us/mem/intune/protect/compliance-policy-create-android-for-work#android-12-and-later---for-personally-owned-work-profile