UNet Password Security

Overview

Your UNet password protects your access to many systems at Brandeis, so it's important to keep it safe. 

Requirements

Attackers frequently run automated password-guessing attempts against Brandeis services. In order to make your UNet password as difficult to guess as possible, we require that it have all of the following characteristics:

  • Between 7 and 24 characters long
  • Is not based on a dictionary word
  • Contains at least one letter, and at least one non-alphanumeric character (spaces count!)
  • Is not similar to your name, your UNet username, or your old password
  • Does not start with any of these characters: ^-$
  • Does not contain too many consecutive keyboard keys, like "qwerty" or "asdfg"
  • Contains at least five unique characters

Tips for Choosing a Password

It can be challenging to come up with a password that meets our requirements and that you can remember. Here are some ideas that work well for other people.

Use a simple phrase instead of a password. Include spaces, punctuation, and/or capitalization. For example, a decent password might be: "it's a secure Password!"

Think of a saying 7-10 words long or so. Then take the first letter of number of each word and put them together to make a password. You may still have to convert some letters into numbers or symbols in order to meet the requirements. For example, if your phrase was "LTS wants you to use a strong password," your password might be "Lwy2u@sp".

Bad Password Ideas 

You should not include in your password information that's easy to find out such as names, birthdays, etc. of spouses, children, or parents. Although mother's maiden name is a common security question, it can be easier to find out than you might think.

Keep Your Password to Yourself

You should never tell anyone your password, including friends, family, co-workers, or LTS employees. Your password should uniquely identify you, and there can be many complications involved in sharing it. If someone else finds out your password, LTS may require you to change it.

It's also not a good idea to use your UNet password for other services.

Remember, LTS staff will never ask you for your password under any circumstances. 

Changing Your Password 

You can change your UNet password online. If you forget your old password you can use the online password reset feature. You can also view or change your security question and answer. If you have trouble with the online forms, you can always reset your password with proper identification at the UNet Helpdesk or Techdesk.

All members of the community are required to change their passwords every 9 months. You will receive a message by email letting you know when it's time to change your password.

Password Auditing

LTS continually monitors the security of UNet passwords. If we discover that your password is at risk, an employee from the Techdesk will contact you by phone and ask you to change your password. We might ask you to change your password in any of the following cases:

  • We observe your password passing over the network unencrypted
  • We believe that someone besides you is using your password
  • We are able to "crack" your password using the same techniques that attackers would use
This page was last modified on: Mar 17, 2008