diff --git a/changelog/16140.txt b/changelog/16140.txt
new file mode 100644
index 000000000..1fffd7ef8
--- /dev/null
+++ b/changelog/16140.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/ad: set config default length only if password_policy is missing
+```