What are the guidelines for choosing a password at the University of Memphis?

• Use at least eight characters
• Use both lower and uppercase letters
• Do not use your first name, middle name, or UUID
• Use at least two alphabetic characters (a-z)
• Use at least two non-alphabetic characters from the following group:

0 1 2 3 4 5 6 7 8 9 _ ! $ % ^ * + -

 Best Practices when choosing a Password

• Avoid using your Universal User ID (UUID), a dictionary word, or numbers associated with your personal information.
• Avoid using blank spaces.
• Avoid reusing any past or current passwords.
• Keep it secure.
• Avoid storing passwords where they are visible or in an unlocked desk.
• Change passwords regularly and frequently.

No matter how complex a password is,
if you write it down,
it is NOT secure.

Password Security - Why should I care?

Your UUID and password give you access to all of the University's computing services.  Every time you connect to the network, you enter your password to prove you are who you say you are.  Should someone else else guess or steal your password, they can masquerade as you, which means the intruder would have access to your files, email, funds, personal information, etc.  In short, an insecure password can easily wreak havoc in your life. 

Examples of bad passwords:

• Your name (even maiden names or your name spelled backwards is easy to guess)
• Your UUID in any form
• Name of a close relative, friend, or pet
• Phone number, office number, address, or town
• Birth date or anniversary date
• Favorite sports team
• License number, SSN, or any all-numeral password
• Names from popular culture (Beatles, Spiderman, etc.)

How Can I Protect My Password?

• Safeguard your password.  Treat all passwords as restricted University information.
• Take responsibility. You are responsible for the security of your passwords and accountable for any misuse if your passwords are disclosed or compromised.
• Make your password unique.  Do not use your U of M password for any other services offered elsewhere (i.e. personal Internet account, free e-mail account, instant messaging account, etc.)  Your University password should be unique from every other password you use.  This will limit your exposure if any of your passwords are compromised.
• Avoid using the "Remember Password" feature.  This feature, typically used to access secure applications, does not adequately protect passwords.  It may be possible for a computer virus or unauthorized user to gain access to this stored information.