Comment Comment by cosmotic Windows should be smart enough to know an empty password doesn't meet the password complexity requirements or is of length zero and not count it against the 'bad password count'. parent cosmotic 2 years ago