Re: Password Standards

[Ben Woelk <fbwis () RIT EDU>]

Dan,
Our password standard info is at https://www.rit.edu/security/content/password

*         Be at least 8 characters long (a longer passphrase is preferred)

*         Use both upper and lower case letters and at least one number, and one special character

*         We suggest putting numbers and special characters in the middle of the password, not at the beginning or end

*         Change it annually (at a minimum)

*         DO NOT use your username

*         DO NOT reuse for at least six changes of password

We are educating our community on the use of passphrases, encouraging length over complexity.

Ben Woelk '07
Private Information Management Initiative Project Manager
ISO Program Manager
Information Security Office
Rochester Institute of Technology
ROS 10-A204
151 Lomb Memorial Drive
Rochester, New York 14623
585.475.4122
585.475.7920 fax
ben.woelk () rit edu<mailto:ben.woelk () rit edu>
http://www.rit.edu/security/

Become a fan of RIT Information Security at 
http://rit.facebook.com/RITInfosec<http://rit.facebook.com/profile.php?id=6017464645>

Follow us on Twitter: http://twitter.com/RIT_InfoSec

CONFIDENTIALITY NOTE:  The information transmitted, including attachments, is intended only for the person(s) or entity 
to which it is addressed and may contain confidential and/or privileged material.  Any review, retransmission, 
dissemination or other use of, or taking of any action in reliance upon this information by persons or entities other 
than the intended recipient is prohibited.  If you received this in error, please contact the sender and destroy any 
copies of this information.



From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Russo, 
Dan
Sent: Tuesday, September 02, 2014 4:35 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Password Standards

Hello -

If anyone has the time, and is willing to share what they use for password standards?

Specifically

Password Length
Password History
Password Expiration (if any)
Password Age


Thanks !