NOTE: Your UMICH password is also called your Kerberos or UMICH Kerberos password. This is the password you use to view your personal information on Wolverine Access and to use services provided by Information Technology Central Services (ITCS).

OTHER PASSWORDS? You may have other passwords at the University — such as Windows Active Directory and Novell. These guidelines offered here are equally valid for any password you may create.

Table of Contents

Why You Need a Secure Password

Think of all the information you store on your computer and your University computing account. If someone else has your password, your electronic life — including e-mail, class projects, and your student account — becomes available. That person can send malicious e-mail in your name and modify or destroy your files.

Your password can also be used to commit fraud, post child pornography, send spam, make threats, break into other systems, and much more. If anything malicious or criminal is done through your account, you will have to prove you are not the culprit!

Table of Contents

Protect Your Password!!

• Don’t write down your password.
• Don’t tell anyone your password — even trusted family members and computer support staff.
• Use only secure programs when connecting to the U-M computing environment — programs that protect your password and usually your data.
• If the service provides a Logout feature, use it.
• Don’t use any of the examples provided in this document; make up your own.

Table of Contents

Guidelines for Creating a Secure UMICH Password

• Select a unique password — not one you are using or have used elsewhere, such as a PIN number or for other computing accounts like AOL or HotMail.
• Use at least 9 characters containing a mix of upper- (capital) and lower-case letters, numbers, and common punctuation. However, do not use a forward slash (/) or the space bar to create a blank space.
• Random capitalization, numbers, and common punctuation always improve a password. The more varied the character set, the shorter the password can be.
• The best passwords are made up. Of course, don't use these examples.
• Use the first letter of words in a phrase and include numbers and punctuation;
  for example, “Do you know the way to San Jose on US-12?” becomes
  “DyktwtSJoUS-12?”
• Create a nonsense phrase like “!bunca*dinckDOc?”

Table of Contents

Very Bad Ideas for Any Password

• Any normal sequence of numbers or letters, including keyboard sequences
• Words found in any dictionary, regardless of language
• Simple transformations of words; for example, by:
♦ adding a character before or after (!horrible or horrible!)

♦ randomly capitalizing letters (HOrriBle)

♦ doubling (horriblehorrible)

♦ spelling backwards (elbirroh)

♦ removing vowels (hrrbl)

• Anything based on personal information that someone could reasonably learn; for example, parts or combinations of your

♦ name	♦ birthdate	♦ home town	♦ address
♦ childhood     nickname	♦ favorite cartoon     character	♦ mother’s     maiden name	♦ social security     number
♦ pet’s name	♦ phone number	♦ driver’s license	♦ license plate

Table of Contents

Changing Your UMICH Password on the Web

1. Connect to https://accounts.itcs.umich.edu/kpasswd-bin/kpasswd.cgi
2. Log in with your uniqname and current UMICH password.
3. Type your current and new passwords as prompted, then click Submit.
4. In the next window, you may enter a hint for remembering your password.
   WARNING! Do not enter your password as the hint.

   If you do not wish to enter a hint, click skip to the services page and proceed to step 8.

5. If you enter a hint, you must also select a challenge question and enter the answer.
6. Click Save and Continue.
7. You will receive a confirmation that your hint has been stored. Click the Service Menu link to continue.
8. Click logout if you are finished using web-authenticated applications.

Table of Contents

Changing Your UMICH Password with a Terminal Program

1. Using a secure terminal program, connect to the ITCS Login Service using the host name login.itd.umich.edu.
   MAC OS X TERMINAL USERS: Enter ssh login.itd.umich.edu.
2. Log in with your uniqname and current UMICH password.
3. At the login prompt, enter your uniqname and press Return or Enter.
4. At the Password prompt, enter your UMICH password and press Return or Enter.
5. At the % prompt, enter passwd and press Return or Enter.
6. At the Password for <youruniqname>@UMICH.EDU prompt, enter your current UMICH password and press Return or Enter.
7. At the Enter new password prompt, enter the new password you wish to use and press Return or Enter.
8. At the Enter it again prompt, enter your new password again and press Return or Enter.
9. You will see a Password changed notification and be returned to the % prompt.
10. At the % prompt, you may perform additional tasks or enter logout to finish.
    WARNING! Be sure to logout of your terminal connection program when you are finished.

Table of Contents

Forgot Your UMICH Password?

• If you used the web method to change your password, created a hint, and the login window provides a Retrieve your hint link, click on that link. You will be asked to answer the challenge question you selected. If your answer is correct, you will be provided your hint.
• If you are unable to answer your challenge question or did not create a hint:

• call (734) 764-HELP [764-4357] and select the option to reset your UMICH Kerberos password; you'll be connected to person who will verify your identity.
• take a photo ID — such as your Mcard or driver’s license — to the ITCS Accounts Office.

Table of Contents

Additional Resources

Windows Internet Access Kit (S4269)

Macintosh Internet Access Kit for Mac OS X (S4298)

Using SSH Secure Shell to Connect to Host Computers [Windows] (S4304)

We welcome your comments; please send e-mail.

ITCS’s Online Help Desk provides a variety of computing help resources.

For further help with your UMICH password, send e-mail to the ITCS consultants or phone (734) 764-HELP.

Table of Contents

Appendix: Making Secure Connections

E-Mail

• mail.umich.edu
• Mulberry, also available from the mail.umich.edu website
• Eudora, when configured for the U-M computing environment

File Transfers, such as between your computer and your IFS Home Directory

• Windows: SSH Secure Shell
• Mac OS X: Fugu

Terminal Connections to Host Computers, such as the ITCS Login Service and the Statistics and Computation Service

Download software and shortcuts for secure connections to commonly accessed U-M computers.

• Windows: SSH Secure Shell
• Mac OS X: uses the ssh protocol built into the Terminal program.

Information Technology Central Services at the University of Michigan

ITCS Home  |  University of Michigan