Password Policy
All passwords must meet certain complexity and history requirements. Password change attempts fail if your new password doesn't meet the criteria.
- Complexity:
- Must be 14 or more characters
- Must contain three of the four character types
- Uppercase (ABCDE)
- Lowercase (abcde)
- Digits (12345)
- Symbols (~!@#$)
- Can't contain your name or username
- Password reuse: Must not be a previous password
- Expiration: Expires after one year and must be changed again
- Password expiration: Passwords must be changed at least once per year
- Notification: Users will receive an email notification reminding them to change their password 14 days before it expires
- Password sharing: Passwords must not be shared with anyone, ever
- Password storage: Passwords must be stored in a secure manner, using encrypted password management software
- Password reset: Users who forget their password must follow a password recovery process that includes identity verification
- Multi-factor Authentication (MFA): Users shall use MFA to access any system or application where required
Change Your Password
Head over to the password change page, hosted with Outlook Web App, and enter your User ID (email address), current password, and new password. When the page says your password was changed then you're done. Canvas, Self Service, and other websites will use the new password immediately.
Office 365, including Outlook and Teams, will update within three to five minutes. If you're signed in to any of those apps they will start to prompt for your new password and won't function until you enter it.