Basic Requirements
Passwords must have a minimum of 12 characters (30 max) and must include at least 2 of the 4 character types.
Users who have access to confidential information must adhere to a 12 character minimum standard and must use 3 of the 4 character types.
Usable Character Types
- Uppercase Letters (A-Z)
- Lowercase Letter (a-z)
- Numbers (0-9)
- Approved Symbols: ! + - _ * ? % . { } ~ "
Important Rules to Remember
Your password cannot contain
- Parts of your name or username - This information is often stored in public directories alongside your username
- Single dictionary words - Password cracking tools easily recognize dictionary word sequences (e.g. password, Substantial, butterfly, house123)
- Simple letter-to-number substitutions - Unfortunately, Password-cracking tools are on to these practices (e.g. P4ssw0rd or f00tba11)
- Cannot contain spaces
- Old passwords - In the event of a compromise, the password will often be sold or added to hacker databases. Using the same password puts you at risk.
- Characters not available on an English (US) keyboard.
A secure password does not have to be difficult to remember.
Methods for Creating Strong Passwords
Consider these tips and tricks to create a secure password that is unforgettable.
Pro Tips
- Make passwords meaningful but not personal
- Avoid using addresses, phone numbers, or family names
- Base passwords on memories or goals
- Use length to your advantage
- Consider using password patterns that can evolve over time
Why These Rules Matter
- Length increases security significantly
- Personal info is often publicly available
- Reused passwords are vulnerable if compromised
- Dictionary words are easily cracked by automated tools
- Simple substitutions are predictable
Do not use any passwords displayed on this page.