Re: Passphrases v Password

["Lisciotti, Kevin" <klisciotti () UMASSP EDU>]

Here at the University of Massachusetts President's Office, we've implemented the mypassword product from Namescape and 
it's worked out really well. Simple and efficient, link is below.

http://www.namescape.com/Products/myPassword.aspx

Thanks,

[cid:ACAA172E-25A8-40BB-AC71-0740EE869631]

:: Kevin Lisciotti, Senior Systems Specialist, RHCE, RHCSA
:: University Information Technology Services (UITS)
:: University of Massachusetts President's Office

:: 774-455-7761 Office
:: 774-455-7733 Fax
:: klisciotti () umassp edu<mailto:klisciotti () umassp edu>

University of Massachusetts : 333 South St. : Suite 400 : Shrewsbury, MA 01545 : 
www.massachusetts.edu<http://www.massachusetts.edu/>



 MICHAEL<mschalip () CNM EDU<mailto:mschalip () CNM EDU>>
Reply-To: The EDUCAUSE Security Constituent Group Listserv <SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () 
LISTSERV EDUCAUSE EDU>>
Date: Friday, July 5, 2013 3:06 PM
To: "SECURITY () LISTSERV EDUCAUSE EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>" <SECURITY () LISTSERV EDUCAUSE 
EDU<mailto:SECURITY () LISTSERV EDUCAUSE EDU>>
Subject: Re: [SECURITY] Passphrases v Password

We *have* a 15 character requirement – for both students and employees – for the past 4-5 years, and they are just now 
considering rolling the students back to 8 characters.  The impact related to Service Desk calls for password resets 
has been off the charts, so we’re hoping that backing this off will help a little bit.

But –we also need a better “self-service utility” to help with password resets.  We’re currently using the “built-in” 
utility that’s in Banner’s Luminus 4 product – it works, but not well – and we’d like to use a password reset utility 
that offers the user “options”, (ie, secret questions, secondary e-mail with link, texting, etc.)  Anyone using a 
utility that they are just crazy about??  Please share….

Thanks,

Michael