Passwords

Passwords most effective when they are strong and secret.

Creating strong passwords 

An effective password is said to be "strong." In other words, complex enough that it is difficult to guess or crack. A strong password must:

• Not contain the user's account name or parts of the user's full name that exceed two consecutive characters
• Be at least eight characters in length
• Contain characters from three of the following four categories:
  • English uppercase characters (A through Z)
  • English lowercase characters (a through z)
  • Base 10 digits (0 through 9)
  • Non-alphabetic characters (for example, !, $, #, %)
• Be easy to remember (technically not a requirement until you try to remember it!)

While not required, here are some additional tips:

• Change your password periodically, especially if you feel it may have been compromised
• Avoid reusing passwords
• Avoid sets of adjacent keyboard keys (e.g., POIUY or ASDFG)
• Avoid using easily guessed passwords and words that appear in the dictionary - these are easily cracked

Example

Jeff is an IT professional with a wife Nancy, and two children John and Lois. The following are easy to remember BUT weak passwords because they do not meet the criteria above:

• NancyJohnLois
• N@ncy

To create a strong password, Jeff decides on an easy to remember phrase based on one of his favorite musicians, Barry Manilow. (It is easy to find out family member names, knowing all of Jeffs hobbies, tastes, and preferences is difficult.) Some strong passwords:

• @Th3C0pa (At the Copa)
• This1's4U (This One's for You)

Keep your password secret

Never share your password. Not even with VIS staff.

When you share a password with anyone, it is no longer a secret and thus becomes a vulnerability. If you feel you are in a situation that requires you to share a password, please consult with VIS to find a solution.

Likewise, do not write your password down or store it in an obvious location. Once it is known by another, it is worthless.