Passwords

In December of 2003 the State of Arkansas Office of Information Technology issued a password standard which “applies to all state agencies, boards, commissions and institutions of higher education”.  The policy can be reviewed at http://www.techarch.state.ar.us/domains/security/standards/SS-70-002_password_standard.pdf. 

Basically the standard requires passwords:

1. to be changed every 90 days
2. be at least eight characters in length
3. must meet 3 of the 4 following types of characters:
   

   I	upper case	ex. ABCDE
   II	lower case	ex. abcde
   III	numbers	ex. 123456
   IV	special characters	ex. Space  !  #  %  _  -

   
   
4. not be reused within six password changes

How to:

• Create a good password
• Protect your password
• Changing password in email
• Forgot your password?

Create a good (strong) password:

• Include both uppercase and lowercase letters (case-sensitive).
• Include both letters and numbers (alpha-numeric).
• Use special characters (Space  !  # )
• Do not include your login name, a.k.a. username, in any form (as-is, reversed, capitalized, doubled).
• Avoid words that can be found in a dictionary (including foreign and technical dictionaries).
• Do not use a password that has been given as an example of a good password.
• Do not use other easily obtained information about yourself, such as license plate numbers, phone numbers, social security numbers, the make of your automobile, the name of the street you live on, the room number or building in which you work, etc.

One possible way to pick a good password is to make up your own acronym. Create a phrase that has meaning to you and pick the first letter of each word or use the phrase itself.

A similar method is to take out all the vowels from a short phrase or use passphrases.

For example:

• "I work 8 hours a day." (wrk8hrsdy) or (Iwork8hoursaday)
• "We like to eat lunch at 11:30." (Weliketoeatlunchat1130)
• "My dog eats too much." (myDogeats2much)

Protect your Password

• Memorize your password.
• If you must write down your new password because you are afraid of forgetting  it, then:

• Never write your username and your password on the same piece of paper.
• Do not place a written copy of your password on the side of your monitor, under your keyboard, etc.
• Destroy the written copy as soon as you have memorized your password.

• Do not allow anyone to look over your shoulder while you are entering your password.
• Change your password often.
• Change your password immediately if it has been compromised.

Changing Password in Email

To change your email password you must be logged into your UAM email account.

After logging into your email:

At your first email screen click on Options (top right section of your email page)

At the Options page, look toward the right side and toward the bottom of the list for: Change your password. Click on that link. Change Password screen displays.

At this screen you will key in required information in the fields:

*Old password = myprevious1 (password you used to log in)

*New password = newpassword2 (your new customized password)

*Confirm new password = newpassword2 (exact same thing you typed in New password field)

*Click on Save

Forgot your password?

If you forgot your password, you can have it reset by calling 460-1036
.