Technology Services - Help & Information

Strong Passwords

A strong password is our first line defense when it comes to protecting information.  We deal with a variety of information each day; much of this information is protected by state and federal law.  Because of this it is especially important to safeguard this information whenever and wherever possible.  Having and using strong passwords is an important part of this protection.  Think of a password as being similar to a lock on the front door of the house:  it helps prevent unauthorized persons from entering.  The stronger the "lock" (password), the more effective it is.

Any time your computer is on a network or connected to the Internet, it presents the possibility for someone also connected to the network or the Internet to attempt to break your password with "brute force" programs similar to a set of keys or lock picks might allow others access via your front door.  These "brute force" programs can test new passwords from an "attack dictionary" every minute or so.  The purpose of both strong door locks and strong passwords is to slow the determined person down long enough that they go elsewhere where the "locks" are less strong.

Choosing a Strong Password

Strong passwords:

• Are a minimum of 8 characters in length.  The longer the password, the harder it is to guess.

• Have both upper and lower case letters.

• Are easy to remember so they need not  be written.  The key is to make it meaningful to you.

• Have numbers and/or punctuation marks in them.  NOTE:  Some systems will not accept some punctuation marks.

• Can be typed quickly and easily so someone looking over your shoulder is less likely to learn your password.

Using pass-phrases is another way to create strong passwords.  For example:

• TSi2h2b@4pm    = Texas Summer is too hot to bear at 4:00 pm.

• dVMwbcbtw!    = darth Vader's Mother wears black combat boots to work!

• 4sbsf;pts    = April showers bring spring flowers; prepare to sneeze.

• iL2s@tnR!    = I LOVE to shop at Target in Rockwall!

Strong passwords are not:

• Short.  The longer the password, the less likely it is to be discovered using a "brute force" program.

• Obvious.  A password that is the same as your username or is your name is obvious.

• Personal information such as your name, phone number, dog's name, child's name, birth date, address, Alma Mater, or favorite musical group or sport.

• Any word in the dictionary or one closely related to a dictionary word (such as common misspellings or words spelled backwards).

• A word where numbers are substituted for letters or appended to words.  For example, p1ckl3jar is not a strong password; nor is bowser32.

• Easy to spot when you type them in.  Passwords such as 1234567890 or nnnnnnnn or asdfghj (a series of letters right next to each other on the keyboard) should be avoided.

• Common passwords such as "iloveyou" , "password", or "aggies" should also be avoided.

Safeguarding Your Strong Password

• Never use your A&M-Commerce passwords for other online accounts and services such as shopping, free email accounts, other web site access, etc.  You should have  unique passwords for your A&M-Commerce accounts.

• If you must write down your password, keep it in a safe place where someone would have to physically break in to find the password (preferably under lock and key).  A sticky note under the keyboard or attached to the monitor is not secure.  Note: Try to limit such written password information to hints or tips.

• Be cautious about typing your password where someone can view (and learn) your password.

• Keep your password a secret.

• Be cautious about entering your password on a strange computer.  Is the anti-virus software enabled and up-to-date?  Is the computer infested with spyware or back door programs such as keyboard loggers which record your keystrokes?

• Technology Services will not  send you an email asking you to verify your username and password.

Managing Your Strong Password

Even strong passwords wear out.  Technology Services recommends that you change your password at least every 90 days.

Other Tips

• Use a password protected screensaver and set the wait time to less than 30 minutes (preferably less than 15).

• Whenever you leave your desk, lock your computer by using one of the following key combinations:  ctrl-alt-delete (select Lock Computer); WindowsKey-L