---
title: "Old password still works after Windows back-end password change"
slug: "oas-ag-old-password-still-works-after-windows-back-end-password-change-3-28"
updated: 2025-07-04T10:04:20Z
published: 2025-07-07T13:24:13Z
canonical: "docs.onespan.com/oas-ag-old-password-still-works-after-windows-back-end-password-change-3-28"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.onespan.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Old password still works after Windows back-end password change

After changing a Windows back-end password, the old password may still authenticate for a period of time after the change. This may occur if OneSpan Authentication Server is installed on a computer in a domain with Windows back-end enabled.

This is a Microsoft feature, and can be mitigated by amending a registry setting. For more details about the issue and a method to reduce the time the old password can be used, refer to [http://support.microsoft.com/kb/906305](http://support.microsoft.com/kb/906305) (last accessed in January 2024).