

Password Guidelines
Q. Are there any guidelines for choosing a password?
A. It is important to the security of the entire department that your
password be secure. Even if you rarely use your account here it is
important to the rest of the department that your account be secure
from intruders. Random testing will be done and accounts with
insecure passwords will be disabled.
Passwords should be between 6 and 8 characters in length, and should
mix upper case, lower case, numbers and punctuation symbols. Passwords
are case sensitive.
Passwords should never be formed from names, places, or any word
that appears in a dictionary or atlas in any language. It is not
sufficient to add numbers nor to replace letters with numbers
within words. These types of passwords are easily cracked. The
password must be composed of a string of characters which are
entirely random to anyone except yourself.
A good way to form such a password is to begin with a phrase which
is meaningful to you, and thus easy to remember, take the first
letter of each word, and then mix in some numbers and punctuation.
For example, "j0hn" is next to useless as a password. But if you
start with "my brother's name is john" and remember that $20 he
owes you, you can form something like "mBniJ$20" which should be
easy for you to remember and still random enough to be secure.
Other Rules of Password Security
- Don't write it down on your desktop, commit it to memory.
- Change it every few months.
- Do not give it out to any other person, ever.
- Never use an unencrypted service such as telnet to log in anywhere.
- Use a different password for each account you have.
[FAQ by Index]
[FAQ by Category]
|
|