Password Security

Day 1

Your username and password give you access to Purdue University's computing services. Purdue University has set up specific policies and guidelines on data security (see Executive Memorandum C-34). This policy states, "These are University assets over which the University has both rights and obligations to manage, secure, protect and control."

Day 2

Passwords are the keys to our system. We each have access to sensitive data that if accessed by an unauthorized source could cost the University in lost time and lead to possible lawsuits if the information obtained were misused. Clearly passwords should be as secure as possible to prevent an unauthorized login. A secure password is one which is easy for you to use but difficult for others or password cracking programs to guess.

A good password has the following qualities:

It is at least seven-characters long
It is easy enough for you to remember that you do not need to write it down
It includes both upper and lower case letters
It includes digits and/or punctuation characters as well as letters
It does not use proper names, such as, Washington, Harry, Bob, etc.
It does not use personal information, such as, your phone number, street address, pet's name, etc.
It is not a dictionary searchable word in any language

Day 3

Only you should know your password. If anyone requests your password, even if they identify themselves as authorized to know this information, advise them that you are not permitted to provide your password.

Day 4

You have set up a good password but, you have trouble remembering your new password so you write it down. You choose one of the seven most common places at your desk to hide passwords.

Under the keyboard
In the desk drawer
On the monitor (e.g., front, side, or below)
Under the speaker
Under the pencil/pen holder
On the side of the computer tower
Under the mouse pad

Now gaining access to the system is easy for anyone who sits down at your desk. Don't let your good password go bad!

Printable view