Passwords and Security

In order to safeguard the system against intruders, we require that all accounts have password protection. This protection is for your safety as well as ours. When you connect to an account (i.e., Banner, Novell, Ra, etc.) you are asked to enter information so that the computer knows who you are, and that you have permission to use its resources. Here are some things to keep in mind when using your account:

• You are responsible for your account. Even if someone gains access to your account without your knowledge and misuses it, you are responsible. The first and best step to securing your account is a good password.
  
  
• Do not use any form (as-is, reversed, capitalized, etc.) of your NetID, login ID, your real name, the names of family members, or friends.
  • NetPassword - Special consideration must be given when selecting a NetPassword. Your NetPassword
  1. Must contain 5-8 characters
  2. Must begin with a letter and contain at least one number or special character
  3. Is case sensitive
  4. Can contain the following special characters %-_!+
  5. Is checked to verify that it is not easily guessed (e.g. abc123 or banana1)
  • All Other Passwords - Use a combination of letters, numbers and special characters such as "(", "+", "~", etc. Do not use any English words. Do use at least six characters. Do not write your password; remember it. Do change your password at least every ninety days. Do use both capital and small letters.
    
    
• For secure passwords - pick a phrase and use the first letter of each word, inserting a special character or two. For example, "Are All Bachelors UnMarried?" could produce "aabum?" as a password. Make up nonsense words which are pronounceable, such as "blimpbot" or "zamat". Combine two short words with a special character, like "truck+in" or "my3sons".
  
  
• Remember to always logout at the end of your session. If you do not logout the next person who uses that computer will have access to your account and its files. Your account could also be accessed by anyone anywhere in the world, and used as a mask for the intruder's unsavory behavior.
  
  
• Check the last place from which your account was accessed. Typically upon login, a line is shown (sometimes briefly) which displays the date, time, and location of the last login to your account. You should always check this display. If you notice anything strange, you should change your password immediately.