Passwords are used for various purposes. Some of the more common uses include: user accounts, web account, email accounts, screen saver protection, voice mail passwords and remote access logins. Since very few systems have support for one-time tokens (dynamic passwords which are only used once), everyone should be aware of how to select strong passwords. If a malicious user can get hold of or 'crack' your password they can access the system with your identity and with your access rights.
Passwords should contain 3 of the 4 character types:
1) $, S or 5 for s
2) 1, I or ! for i
3) @ or A for a
4) 7 or T for t
5) 3 or E for e
6) 9, G or 6 for g
7) 0 or O for o
8) 8 or B for b
internet explorer - 1nt3rN3TeXp70r3R
happy days - h@pPyD@Y$?
good boy - 60odB0y!
Substitute codes or words into other words (insert numbers between the letters of the original word).
Examples include (original word - Pattern/Code/Word to insert - Password):
1) internet - numbers doubling eg 1,2,4,8,16 - I1n2T3e4R8n16E32t!
2) today - favorite color Orange - t0oRd@aNyGe
3) John - favorite football team tigers - Jt0iHgN3r$
Create a password from phrases with character substitution. Phrases can be any number of things--statements, locations, lines from books or movies etc.
Examples: (Format: Phrase - How to construct word - 'Word' Using Parts of phrase
- final password with substitution)
1) The next generation is you - First and last letter from each word -
Tentgnisyu - 73n79N!$yU!
2) 45 main street - First 2 letters in word with a number between
first letter of each word in capitals - Fo1Fi2Ma3St4 - Fo1F!2M@3St4
3) I drive a holden commodore now - First letter of each word with the
characters of my number plate between (assume number plate is ABC 123)
- iAdBaCh1c2n3 - !AdB@Ch1c2n3!
Protecting your password
Do not use the same password for Western Michigan University accounts as for non-Western Michigan University accounts (i.e. personal ISP accounts, Brokerage accounts, benefit accounts, etc). Remember, if one account password is compromised, all accounts may be compromised. Do not share your University password(s) with anyone, including administrative assistants, supervisors, secretaries, or co-workers. All passwords are to be treated as sensitive, confidential Western Michigan University information.
If you suspect your account or password has been compromised, report the event to the appropriate system administrator and the University Information Security Administrator and change your password immediately.
If someone demands your password, refer him or her to this document or have him or her contact your system administrator or the University Security Administrator in Office of Information Technology.