How to Create a Strong Password

Creating a strong password for your UMS Account.

Detailed Information

How to Create a Strong Password:

• All UMS account passwords MUST:
  • be at least 8 characters in length
  • contain upper- and lower-case letters
  • contain digits, punctuation and/or special characters
  • NOT be based upon the username, personal name or personal information
  • NOT be a standalone word in any language, slang, dialect or jargon, etc.
  • NOT be a previously selected password
  • NOT be used as a password for any other accounts elsewhere outside of the University
  • be changed within 180 days
• Additionally, when updating a password in response to being alerted of a compromised account, it is imperative to choose a new password which is entirely unique to the previously used password for the account, or otherwise to avoid any form of "password recycling," which many users are inclined to do out of convenience.  Explicitly:
  • Do NOT increment on a number used in a previous password without modifying the rest of the password (example: "Password1" > "Password2")
  • Do NOT affix an additional character to the beginning or end of the previous password without modifying the rest of the password (example: "Password1" > "Password1!")
  • Do NOT update a date used in a previous password to another date without modifying the rest of the password (example: "Pw04/2020" > "Pw10/2020")
  • Do NOT alternate capitalization of words within a password without modifying the rest of the password (example: "Lewist0nauburn" > "Lewist0nAuburn")
  • Do NOT rearrange words or phrases within a password without modifying the rest of the password (example: "Correcthorsebatterystaple1" > "Batterycorrectstaplehorse1")

Environment

• accounts
• security