Safe Computing Principles: Safeguard your Password

Contents

Other Safe Computing Principles

These days, you need passwords nearly everywhere — at ATMs, using your debit card at a gas station, for online bank accounts, on eBay, when you log on to computer and e-mail systems, and so on. Because computing technology is so ingrained in our daily activities, you must take security measures on a regular basis to safeguard your computer and the information on it, as well as the University's data and resources. (See WSU policy on Acceptable Use of Information Technology Resources, section 3.1.)

Just like you would want to secure your home as best as possible by locking the doors, just like you want to protect your automobile by using security devices and/or alarms, you want to do the same with your accounts. Using strong and secure passwords helps you protect your identity and computer.

At times, a password may be the last, or only, line of defense your computer possesses. If you have a weak password, a hacker has an easy time cracking it and gaining access to all the information that resides on your computer. It's easy to fall in to the trap of just creating an easy password because you're in a hurry, or because you currently have so many different passwords that you can't possibly think of another one. Unfortunately, this type of negligence is what a hacker hopes for.

This is one of the reasons we offer you some tips and provide some guidelines on how you can create strong secure passwords. By following these recommendations, you can help to create a more secure computing environment at Wayne State University.

Let's start with a few tips on password usage:

  1. NEVER tell anyone your password: This can easily lead to your password being misused. Someone can pose as you and create all kinds of problems, from personal ones to legal ones. For example, if someone has your e-mail password, they could use your account to send an offensive or harassing e-mail to someone. It's important to remember, specifically with your WSU E-Mail account, that you are responsible for its use. Also, do not be tricked by e-mail messages that seem to come from a legitimate source telling you they need your password; no legitimate company or institution would require you to divulge your password.
  2. NEVER write down your password: This is one of the easiest ways for someone to obtain your password without your knowledge. Sometimes people hide the written password under their keyboard or in a desk drawer, thinking it's safe. This really isn't the case; while you're away from your office someone could take a quick look around and spot your password written down.
  3. Periodically change your password: Using a password for an extended length of time makes it susceptible to being discovered. A general guideline is to change a password every 90 days. (If you have technical support staff, they may have instituted a different timeline, so check with them.) Another consideration is what you use the password for. If you are logging into the New York Times, then it isn't as imperative to change this password as frequently; but if you are logging into a university server or database that contains sensitive information, such as financial records or social security numbers, you would want to change that password much more often.

Practicing these password usage tips will safeguard your password and will make for a better computing experience. It also advocates the safe computing principles that Wayne State University is committed to upholding.

Guidelines to create a secure password:

Related Information