Passwords should contain a minimum of8 alphanumeric characters (a mix of upper and lower case) including at least one special character or number, whenever possible.
Passwords should not be displayed or shared with anybody.
Use a password that can be typed quickly, without having to look at the keyboard. This makes it harder for someone to steal your password by looking at your keyboard (also known as "shoulder surfing").
Change passwords regularly. Passwords should be changed at least every 60 days or when compromise is suspected.
The more critical or sensitive the information (administrator, medical information, personnel information, etc.), the more frequently the password should be changed. A changed password stops someone who has already compromised an account from continued access .
Do not use shared accounts. Accountability for group access is extremely difficult.
Do not use a password from information easily obtained about you. For example: pet names, license plate numbers, telephone numbers, identification numbers, the brand of your automobile, your street name, etc. Such passwords are very easily guessed by someone who knows you.
System default and initial passwords should be changed immediately upon receipt.
Printer Friendly
Text Version
Twitter
Facebook
Yahoo
Google
Digg
Newsvine
StumbleUpon
Bookmark
Email Page