How to get the last password change date of Microsoft 365 users

Tracking password set dates is a basic but critical administrative task. Administrators need visibility into when user passwords were last changed to meet compliance requirements, follow security recommendations, and investigate suspicious password changes. In large environments, manually checking this information across accounts is inefficient and unreliable. Without a clear way to list password change dates, abnormal or non-compliant activity can easily be missed.

This article will show you how to get a Microsoft 365 password change report with native tools, including the Microsoft Entra admin center and Microsoft Graph PowerShell, and with ManageEngine M365 Manager Plus, a dedicated Microsoft 365 administration tool.

Method 1: How to check the last password change date using the Microsoft Entra admin center

Prerequisites

An Entra ID user account that has at least the Reports Reader, Password Administrator, or Helpdesk Administrator role assigned to it.

Steps

1. Log in to the Microsoft Entra admin center and navigate to Users > All users.
2. Click Manage view and select Edit columns.
3. Click Add columns, search for Last password change date time and select it.
4. Click Save to update the view.
5. Select the check box next to the users you want to generate the report for and click Download Users to export the list of Microsoft 365 users with their last password change date.

Method 2: How to get the last password change date using PowerShell

Prerequisites

1. The Reports Reader, Password Administrator, or Helpdesk Administrator role must be applied to the account you use to sign in to Microsoft Graph PowerShell.
2. You must be connected to the Microsoft Graph PowerShell module.
   1. To check if the Microsoft Graph PowerShell module is installed, use this script:
      Copy

      Get-Module Microsoft.Graph -ListAvailable

      If it does not return a value, you will have to install the module.

   2. To install the Microsoft Graph PowerShell module, execute this script:
      Copy

      Install-Module Microsoft.Graph -Scope CurrentUser

   3. To connect to Microsoft Graph, run this script:
      Copy

      Connect-MgGraph -Scopes "User.Read.All"

Using Get-MgUser to get the last password change date using Microsoft Graph PowerShell

The Get-MgUser cmdlet can be used to retrieve the LastPasswordChangeDateTime attribute, which shows the most recent password change performed by the user.

Use the following Microsoft Graph PowerShell snippet with the Get-MgUser cmdlet to find the last password change of your Microsoft 365 users.

Get-MgUser -All -Property "DisplayName","UserPrincipalName","LastPasswordChangeDateTime" |
                        Select-Object DisplayName, UserPrincipalName, LastPasswordChangeDateTime | Export-Csv -Path
                        "C:\Reports\PasswordChangeDate-$(Get-Date -Format yyyyMMdd).csv" -NoTypeInformation -Encoding
                        UTF8

Supported parameters

The following table contains parameters used with the Get-MgUser cmdlet to retrieve the last password change of your Microsoft 365 users.

Method 3: How to view last password change dates in M365 Manager Plus

1. Log in to M365 Manager Plus, navigate to the Reports tab > Azure Active Directory > User Reports and click the Password Changed Users report.
2. Click Add/Remove Columns, select Last Password Changed from Available Columns, click the >> icon > Save. You can also move the Last Password Changed column by clicking Up until it reaches the position you want.
3. You can now view a list of all Microsoft 365 users who changed their passwords with their last password change date.

Streamline Microsoft Entra ID user governance and group management

M365 Manager Plus provides a unified command center for managing the entire life cycle of your Microsoft Entra ID users and groups. Gain instant visibility into group memberships, ownership gaps, and orphaned objects, plus view, manage, and track identity objects across your Microsoft 365 tenant from a single console—all without switching between multiple admin portals.

Important tips

Frequently asked questions