I use Windows 7 on a Lenovo laptop. When I enter a wrong password, either when I'm connected to our network or when disconnected, it takes quite a lot of time for Windows to report the password is wrong. And by 'a long time' I mean as much as 20-30 seconds sometimes. Now, even, say, 5 is a lot, I would say - so whatever I can do to reduce this, I want to do (including any artificial security-related delay for incorrect passwords).
First as a direct Windows 7 answer from MSDN, the OS is built with the following decision branching for password validation:
After reviewing password policy on Microsoft Technet for Windows 7, Server 2003, Server 2008, the following settings are possible:
Password History, Minimum Password Length, Maximum Password Age, Minimum Password Age, ObservationWindow, LockoutDuration, LockoutThreshold, badPasswordTime, badPwdCount, ntPwdHistory, ForceUnlockLogon
If you're on a domain, this would be set through a GPO and out of your control, however; locally for a computer on a workgroup, you can make the settings through SecPol.msc under
The only setting even close,
In all the settings, nothing references failed password delay, so it's apparently hard coded into the OS.
Now if you're on Linux, you can add parameters to PAM to allow removal of this delay, if it was set up to accept the parameter, otherwise, you have to recompile the pam module that controls this function with settings of your own choice.