Password Security Checklist

Ask yourself the questions below. Balance your answers with the need to have a password that you can remember without having to write it down. If you have a secure password that is easy for you to remember and you use it with care, you may not need to change it as often as someone whose password is more vulnerable.

• Were you informed by ITCS or your security unit liaison that you have a weak password?
  If so, it's time to change your password.
• Have you used your password for a non-U-M service?
  We recommend that you use your UMICH Kerberos password only for U-M services. Other services may not provide the same level of password protection that U-M does. If you have used your password for non-University services, it's time to change your password.
• Have you used your password on a public computer at a hotel or an Internet cafe?
  Such computers are sometimes vulnerable to those who install keystroke-capturing or password-sniffing software. If you often use public computers, you should change your password about every six months.
• Have you accidentally typed your password in the wrong box?
  It's very easy to accidentally type your password in the User ID box when you're in a hurry. If you do that at a public computer, someone might see it. Also, information entered in the User ID box does not get encrypted when it is sent between computers. If you have accidentally typed your password in the wrong box, it's time to change your password.
• Have you told anyone your password?
  Never tell anyone your password! If you have, it's time to change your password.
• Is your password several years old?
  It's time to change your password.
• Does your password follow the guidelines for UMICH Kerberos password security?
  If not, it's time to change your password.

Information Technology Central Services at the University of Michigan

ITCS Home  |  Contact ITCS  |  U-M IT Resources  |  Wolverine Access  |  University of Michigan   March 04, 2008