// PASSWORD SPRAY PLANNER

Password Spray Planner

Enter the domain lockout policy and the tool computes a lockout-safe cadence — how many passwords per window, how long to wait — so you never lock an account. Also generates candidate passwords and a schedule. Planning only: it never sends an authentication attempt (that's the Lane-B sprayer).

⚠ For authorized engagements. Get the real lockout policy first (net accounts / Get-ADDefaultDomainPasswordPolicy); a wrong number here can lock users out. When unsure, use 1 attempt/window.

Lockout threshold (0 = none)

Observation window (min)

Reserve (leave for user typos)

# Users

# Passwords to try

Clock skew buffer (min)

Company (for candidates)

Domain

DC IP