Password Management Guidance


It is critical to maintain your password appropriately. Remember, in computer security, passwords are always the weakest link! If your password is compromised, you jeopardize:

Use the tips below to safely manage your passwords. Your department may have more restrictive security policies to be followed.


Keep your password private

The university has assigned the account to you, and only to you. You have the responsibility to keep your password private to prevent unauthorized use. 


Don’t leave your account exposed

Protect your account on computers

While remaining logged on to a computer doesn’t expose your password, it allows someone else access to your account. 

Log out of any IT service when using a shared computer, such as IT Computer Classrooms when finished.

Avoid writing down your password

If you do write your password down, you risk someone else reading it and using it to gain access to your account and data. If you absolutely must write down your passwords:


When to change your password

If you suspect that your password has been stolen or compromised, change it immediately. Some examples of a possible compromised password, include:


Strategies for remembering your password

Password managers

Best practices include password managers such as KeePass, SplashID, 1Password, LastPass, the Keychain feature for Mac OS X, and modern browser storage in Edge, Firefox, and Chrome can provide a central, secure location for all your passwords. Note: UMass Amherst IT does not offer direct support for password storage software at this time.

Warnings: If your NetID and password are needed to unlock your computer, do not rely on a password manager that is only available once you log in.

Make sure to work with a reputable password manager or browser and not a substandard site. Reputable functions include encrypting the data before storing in the cloud.

Use the password reminder in Spire

Password construction strategies

Longer and more randomized passwords are more effective. Below are methods to help you create strong passwords.

Choose a theme for all your passwords (e.g., your passwords are always based on your favorite songs or movies). Decide on a few rules that you'll use to construct your passwords. For example:

 Select a song: Romewasn'tbuiltinadaybyMorcheeba.
Theme: music. Rule: Use song name and artist.

Note: Please do not use this example. Hackers often try passwords available in reference materials.