Re: Passwords & Passphrases

["Torres, Juan" <torresj () OHIODOMINICAN EDU>]

During the semester break we are moving to:

 

*          Cannot contain significant portions of the user's account
name or full name

*          Must be at least seven characters in length

*          Must contain characters from three of the following four
categories: 

*

English uppercase characters (A through Z)

*

English lowercase characters (a through z)

*

Base 10 digits (0 through 9)

*

Non-alphabetic characters (for example, !, $, #, %)

*          Expiration: 120 days

*          Passwords remembered: 3  (cannot reuse last 3)

 

 

 

Juan A. Torres
Helpdesk Manager

Ohio Dominican University Computer Helpdesk
1216 Sunbury Road | Columbus | OH | 43219
1.888.251.0773 | 614.253.3615

From: Brian T Nichols [mailto:bnichols () LSU EDU] 
Sent: Monday, November 19, 2007 12:49 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Passwords & Passphrases

 

Colleagues,

 

We are researching best practices regarding passwords and passphrases
(length, complexity, expiration, etc..).

 

Does anyone have a standard and/or policy they can share?

 

Thanks in advance!

 

-Brian

 

Brian Nichols, CISSP, CISM, CISA, CIA

Chief  IT Security & Policy Officer

Louisiana State University