Password Security

Please be informed of the following updates to staff Active Directory password policy, which will be enforced at your next required password reset. These changes are designed to significantly enhance our password security posture while extending the interval between required password changes. 

Password Length: 

• Effective January 13th, any new active directory passwords must be at least 12 characters long, 1 or more capital letters, and at least 1 special character. 

Password Reset: 

• Annually, all employees will be required to reset their passwords. 

Why Longer Passwords Matter: Longer passwords are significantly more difficult for hackers to crack through brute-force attacks. Each additional character exponentially increases the number of possible combinations, making it much harder for unauthorized individuals to guess or decode your password. 

Password Best Practices: To enhance security, we strongly recommend adopting the following best practices: 

• Create Strong Passphrases:  

• Use a combination of words, numbers, and symbols. 

• Avoid easily guessable information like birthdays, names, or pet names. 

• Example: "MyPurpleCatLoves2EatFish!" 

By following these guidelines, we can significantly strengthen our organization's overall security posture. If you have any questions or require further assistance, please contact the Technology Services department. 

Passwords should NOT:

• Be a single word from the dictionary, including a word spelled forwards or backwards, or preceded or followed by a number (1secret, secret1)
• Include the user name, log in name, names of family members or pets, birthdays, hobbies, address, school name or mascot, such as HpSc0ts!
• Be a common keyboard sequence, such as abc123
• Be a dictionary word with a letter replaced by a number or symbol, such as Pa$$w0rD

Passwords can be a short phrase, or the first letter from each word in the phrase. Using the phrase, "O Romeo, Romeo! Wherefore art thou Romeo?" from Shakespeare's Romeo and Juliet,  one could create the following password 0RR!w4atR?

Note:  Do not use any of the password examples included in this resource.