Getting ErrorCode: 120018 when trying to access Microsoft account through login.microsoftonline.com portal

Question

Split from this thread.

Hi,

We 've got a user with the exact same issue:

"Ce mot de passe a été utilisé trop souvent dans le passé. choisissez une chaîne plus difficile à deviner.

(which means: "We've seen that password too many times before. Choose something harder to guess.")

ErrorCode: 120018

Correlationid: 4ab3a486-a11a-4ead-983c-c1c391c3e7d5"

It happens when he tries to update his password from the "login.microsoftonline.com" portal.

We tested more than 5 different new passwords (passwords which were never seen before).

Office 365 is synchronized with AD; the user's account is not locked or whatsoever, the account is set to be able to change password but cannot reset it.

Thanks in advance.

***Post moved by the moderator to the appropriate forum category.***

Answer 1

Hi All,

Thanks for your replies.

Generally, the password length is greater than about 10 characters. I understand that some users may want to have longer passwords. Please submit your feedback to improve our products and services. Your understanding is highly appreciated.

Best Regards,

Erick

Answer 2

There is no way the passwords we are using have been used before. We have tried several random 16 character passwords, using a password generator. We still get this same message regardless of the password - sample failed password (nE58$&zVK4TyrgdD). There's a better chance of winning the lottery.

Answer 3

:) I was trying a similar (well not really similar) long password. It turns out the password was too long. I shortened it from about 16 characters to 11 and it worked! Come on Microsoft!!!

Answer 4

Hi Sebastian

The error message indicates that the password is too simple. If Office 365 thinks that a password is simple and there’s a high possibility that this password is used by other users, it will suggest you a more complicated password, no matter whether you used the password before.

Please use a complicated password, which consists of upper-case letters, lower-case letters, numbers, symbols.

If the issue persists, please let us know:

1. Does the issue occur to other users?
2. If admin change password for the user in local AD, can it be synced to online? You can check it by seeing if the new user can login with the new password.
3. If you create a pure online user for test (with the ***.onmicrosoft.com), does the issue occur?

Thanks,

Brook

Answer 5

Did you manage to solve this issue? If so, how? I have the same problem.