Southern Methodist University
SMU
SMU Home > Business & Finance > Information Technology Services
INFORMATION TECHNOLOGY SERVICES

Passwords and their Importance

Passwords are a key to the protection and security of information, be it personal information or University information. The effective use of passwords is the responsibility of all who access personal and University information systems. Good password selection and protection are key to the protection of YOUR information. Select passwords carefully, change them frequently (do not repeat), and NEVER share your password with others. Office workers many times write their password on sticky notes or slips of paper and leave the note in accessible locations which turns into a potential security risk. Never leave your desktop logged into Access.SMU or other University information systems while you are away from your desk.

Beginning February 14, 2006 ITS will implement a strong password policy.  The new policy will ensure that all passwords provide the appropriate security for your information.  This policy is being implemented in response to a security audit conducted last year and as an industry recommended best practice. 

Passwords will need to meet the following criteria:

·         Must be a minimum of 8 characters in length

·         Must contain 3 of the 4 character sets: upper case letters, lower case letters, numbers and punctuation/special characters

·         May not contain more than 3 of the numbers found in your SMU ID number in the order in which they appear

Current passwords will continue to work even if they don’t meet the new password criteria.  However, when your password is reset, the new policy will be enforced. Passwords may be reset using the online reset tool located at http://www.smu.edu/password.

Why should I choose a strong password?

Your password is essentially the key to your identity. With a password, a hacker can check your browser history to see where you spend your time on the internet. They may be able to see where you do your banking, your e-mail, your investments, online shopping etc. In addition, they may be able to apply your password to access your financial information, your personal information, etc.

Take a moment to think about the files that are stored on your computer.  Is there information stored within files that contain personal information about someone else?  For example: do you have files with SMU ID numbers, Social Security numbers, University financial information etc? What could happen if a total stranger gained full access to those files? Choosing a strong password to guard your data will greatly increase the security of your accounts and reduce the risk of that data falling into the wrong hands. 

The key to protecting your identity and your information is selecting a password that is not easily hacked or guessed. The debate that ensues over strong passwords is finding a way to meet the security needs but also find a method that is user friendly. After all, who can remember a completely random assortment of letters, numbers and characters?

What makes a strong password?

A strong password has two characteristics: length and character set.

Length:  The longer the password is, the more difficult it is to hack. The exception to this rule is passwords that consist of only dictionary words. I could set my password to the word encyclopedia--- it’s long but would be cracked in less than 1 second.

Character Set: Passwords consisting of upper and lower case letters, numbers and punctuation/special characters are nearly impossible to crack.  Passwords that are only comprised of letters can be detected in less time than those that involve a combination of letters and numbers.

How do I select a strong password?

How do you create a password that is at least 8 characters in length, includes upper and lower case letters, numbers and characters, and is easy to remember? One of the easiest approaches is the use of a pass phrase. Think about the first line of a book or a song.  Even though it contains dictionary words, it also contains upper and lower case letters, spaces and punctuation.  A phrase also tends to be much longer than most traditional passwords. For example: “Is it Friday yet?”  Not only does that pass phrase include both upper and lower case letters, but it also includes punctuation. It is also 17 characters in length!  Easy to remember? You bet!

Remember, the password policy is being enforced to offer greater protection to your data and your identity.

Please review the following to ensure the security of your account:

1.       Remember, never write your password down anywhere. The first place most people look is under the keyboard or mouse pad. Please do not store your password anywhere-- especially near your computer!

2.       Be aware of your surroundings whenever you are logging into your accounts.

3.       Never give your password out to anyone

4.       ITS will never ask for your password in an e-mail.  If such a request arrives in your inbox, please delete it immediately!

  1. Before you step away from your desk, either lock your computer workstation or activate a password protected screensaver. This will insure that there is no unauthorized activity under your computer account without your knowledge!

To view the entire Security Awareness Newsletter, please go to http://www.smu.edu/help/newsletter.

Quick Tip: If your browser automatically remembers your username and password, you may wish to disable this feature. Open Internet Explorer and click Tools--Internet Options. Then select the Content tab. Click on the Auto Complete button. You will then be able to clear all passwords from your browser and uncheck the option to save usernames and passwords.

CONNECT TO


IT Changes and Alerts
About IT Changes
About Emergency Outages
Current Changes and Outages
Subscribe to IT Change listserve