Educause Security Discussion mailing list archives

Re: Student Passwords


From: Jack Reardon <jack.reardon () WORCESTER EDU>
Date: Wed, 7 Dec 2011 08:21:48 -0500

Minimum of 8
Complexity
Every 90 days
Can't use last 10
30 minute lockout after 5 consecutive login failures
Users can reset using our password reset page
Users are snail mailed original password.

Jack Reardon
Associate Director, Infrastructure Services
Worcester State University


On Wed, Dec 7, 2011 at 8:13 AM, WILLIAM I ARNOLD <WARNOLD () ut edu> wrote:

Minimum of 8
Complexity
Every 90 days
Can't use last 3

-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of SCHALIP, MICHAEL
Sent: Tuesday, December 06, 2011 11:51 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Student Passwords

We'd really like to refresh this discussion as well.....15 characters -
no complexity - change every 128 days - last 5 passwords are
retained....

What are others doing?  Is everyone else still at 6-8 characters?

Thanks....



________________________________________
From: The EDUCAUSE Security Constituent Group Listserv
[SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Daniel Bennett
[dbennett () PCT EDU]
Sent: Tuesday, December 06, 2011 9:40 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Student Passwords

This has gone around a few times in the past but I am looking for fresh
results.

What is your stance on student passwords?  Do you make them change their
password every X number of days?  Complexity rules? Etc.

Thanks.
--
This message has been scanned for viruses and dangerous content by
MailScanner, and is believed to be clean.
--
This message has been scanned for viruses and dangerous content by
MailScanner, and is believed to be clean.


Current thread: