MUnet Password / Guide: Create secure Miami credentials

Objective

• To provide guidelines on creating a secure MUnet password 
• To provide guidelines on creating secure Miami credentials 
• To provide guidelines on password requirements and format 

User

• Miami University Staff, Faculty, Student

Environment

• 1388733: RapidIdentity
• 908729: MU IAM Portal
• Security
• 10296: MUnet Password Utilities (WAS)
  • MUnet Password

Rationale

• Poorly-chosen passwords are responsible for many compromised or damaged accounts

Guidelines 

Create a secure password

• Your password should be:
  • at least sixteen characters in length — in general, longer is better
  • composed of a mix of letters (abc...), capitalization (aAbBcC...), numbers (1234...), and special characters (*&^%$@)
    • If your MUnet password is sixteen characters in length and contains all four types of characters listed above, it will be good for five years instead of the usual six months
  • memorable — if your password is so complex that you cannot remember it without writing it down, choose another password
  • private — passwords should not be shared with anyone, even support staff

Choose your technique wisely

• Avoid poor passwords by choosing a creative technique
  • Pick a phrase that you can remember and compact it into a password
    • example: Bob is too witty becomes Bobis2witty (don't use the word Bob if that is your own name)
  • Pick a phrase that you can remember and use the first letter of each word to create a password
    • example: All of my 3 children are wonderful kids becomes Aom3cawk
  • Combine parts of several words to create a password
    • example: If my mother's maiden name is Burger and all of her 12 family members are crazy for pie, I might construct a password like Burg12allnuts4pie
  • Many web sites provide tips on selecting good passwords: Conduct an Internet search on password security for more ideas

Avoid commonalities

• Do not use:
  • a word that can be found in any dictionary — English, Chinese, French, German, Farsi, etc.
  • a value that is the same as your UniqueID
  • your name or birth date, your significant other's name or birth date, your child's name or birth date, your dog's name, your mother or father's name, favorite band, etc.
  • your computer system's name
  • your favorite movie title or band or book
  • your street name or city
  • any of the passwords that are listed as examples on this page