Passwords come and go

New security policy requires new codes every semester

KU Information Services has implemented a password policy to promote secure electronic information resources for the Lawrence and Edwards campuses. This policy, which requires passwords be changed frequently, supports the IT Security Office’s ongoing efforts to protect KU’s electronic systems, data and networks.

“ Good technology security requires more than just hardware and software solutions,” said Allison Rose Lopez, public relations and marketing manager for Information Services. “It requires the people who use the KU network to be active partners in preventing unauthorized access to its extensive electronic resources and the more than 17,000 computers on the network.

Because nearly 32,000 people access KU's systems, successful security hinges on collective support from the campus community, Lopez said.

Those who use the same password for a long time leave personal information, their computers and the network vulnerable, she said.

Strong passwords must:
• Be changed at least once a semester.
• Be different than the user's login name or its reverse.
• Avoid obvious personal information.
• Include at least seven characters.
• Include digits and both upper and lower case characters.
• Include at least one symbol (examples: * # & % $).

Password examples:
• The Good: RdSxR#1, IlvJD4evr!, $15Pd@4%, 3Yrs2go!, etc.

• The Bad: ABCDEFG, 7654321, 22222222, redsox, jayhawk, smith, rockchalk, ilovejohndoe, etc.

• The Obvious: Family names, pets, birthdays, addresses, phone numbers etc.
Tips from Info Services

Yes, the policy is a change, but remember:
• A strong password can be both clever and easy to remember. See “The Good” (above) for examples.
• Your cleverness can keep your computer clean. Hackers are becoming increasingly sophisticated and clever, and so should your password.
• You have to choose not to undermine your own password. Even a complicated and clever password is useless if it is shared, posted on a sticky note for convenient reference, or included in electronic communication.
• A little extra thought helps avoid big hassles later. It's much easier to change your password than to recover data from a compromised or damaged computer.

For assistance creating a secure password, visit www.security.ku.edu.
To read the password policy, visit www.policy.ku.edu/it/security.shtml.