|
|  |
 Printer Friendly
 Text Version  Email Page
| Password Security |
Passwords
- Passwords should contain a minimum of 8 alphanumeric characters (a mix of upper and lower case) including at least one special character or number, whenever possible.
- Passwords should not be displayed or shared with anybody.
- Use a password that can be typed quickly, without having to look at the keyboard. This makes it harder for someone to steal your password by looking at your keyboard (also known as "shoulder surfing").
-
Change passwords regularly. Passwords should be changed at least every 60 days or when compromise is suspected.
- The more critical or sensitive the information (administrator, medical information, personnel information, etc.), the more frequently the password should be changed. A changed password stops someone who has already compromised an account from continued access .
- Do not use shared accounts. Accountability for group access is extremely difficult.
- Do not use a password from information easily obtained about you. For example: pet names, license plate numbers, telephone numbers, identification numbers, the brand of your automobile, your street name, etc. Such passwords are very easily guessed by someone who knows you.
- System default and initial passwords should be changed immediately upon receipt.
|
|
|
|
