Password Management Guidance


Password Management

 

It is critical that you maintain your password appropriately. Remember, in computer security, passwords are always the weakest link! If your password is compromised, you jeopardize:

Below are simple tips you can use to safely manage your passwords. Your department may have more restrictive security policies that you must also follow.

Keep your password private

The university has assigned the account to you, and only to you. You have the responsibility to keep your password private to prevent someone using it for unauthorized purposes.

 

Don’t leave your account exposed

Protect your account on computers

While remaining logged on to a computer doesn’t expose your password, it allows someone to use your account as if they were you.

 

Avoid writing down your password

If you do write your password down, you run the risk that someone else could read it and use it to gain access to your account and the data you are responsible for protecting. If you absolutely must write down your passwords:

 

When to change your password

If you suspect that your password has been stolen or compromised, change it immediately. Some examples of that should raise your suspicion of a compromised password, include:

 

Strategies for remembering your password

Password managers

Best practices include password managers such as KeePass, SplashID, 1Password, LastPass, the Keychain feature for Mac OS X, and modern browser storage in Edge, Firefox and Chrome, can provide a central, secure location for all your passwords. Note: UMass Amherst IT does not offer direct support for password storage software at this time.

Warnings: In case it didn’t occur to you yet, your NetID and password is needed to unlock your computer and you should not rely on a password manager that is only available once you log in.

Make sure you are working with a reputable password manager or browser and not a substandard site. Reputable functions include encrypting the data before storing in the cloud.

Use the password reminder in Spire

 

Password construction strategies

Generally, the longer and the more “chaotic” the password, the better. Below are methods to help you create strong passwords.

 

Choose a theme for all your passwords (e.g., your passwords are always based on your favorite songs or movies). Decide on a few rules that you'll use to construct your passwords. For example:

 Select a song: Romewasn'tbuiltinadaybyMorcheeba.
Theme: music. Rule: Use song name and artist.

Note: Please do not use this example. Hackers often try passwords available in reference materials.