What does Windows error code 657 (ERROR_PWD_TOO_LONG) mean?

ERROR_PWD_TOO_LONG

What ERROR_PWD_TOO_LONG means

Although modern Windows authentication supports long passwords in many paths, individual providers, legacy protocols, APIs, or connected systems can impose a smaller maximum. The authoritative account service rejected the submitted value.

Where it commonly appears

• Password changes through legacy APIs
• Synchronization to non-Windows identity stores
• Service-account rotation across heterogeneous systems
• Applications with fixed-size credential fields

Likely causes

• The target provider has an explicit maximum length
• A legacy protocol truncation limit is enforced as an error
• The application includes unintended characters or encoding bytes
• A downstream system cannot store the generated credential

Troubleshooting checklist

1. Determine which account provider actually rejected the value
2. Measure the submitted value after normalization and encoding
3. Check connected-system and protocol limits
4. Verify that newline or null characters were not accidentally included
5. Never log the password itself

Guidance for developers

Avoid arbitrary client truncation, which changes the secret and can desynchronize systems. Generate credentials within the smallest documented limit of every system participating in rotation, and report which boundary rejected the value.

Guidance for administrators

Review identity synchronization and legacy dependencies before changing policy. For managed service accounts, prefer supported automatic credential management instead of custom long-password generation.

Example

A rotation tool creates a 128-character password acceptable to the directory but then changes it through a legacy integration limited to fewer characters. The provider returns this code. Selecting a supported cross-system length fixes the workflow.

Related conditions

This is distinct from complexity, history, and minimum-length failures. A password can be strong and unique yet still exceed an implementation limit.

References

• Microsoft system error codes 500–999
• Password policy and provider limits