Step

Responsible Party

Action

1.

User

Create a strong password in the following manner:

• Length. Use eight (8) characters, unless the system does not permit; then use the maximum possible.
• Characters. Use at least one alphabetic (a-z) and one numeric character (0-9); as the system allows or requires, including the order of the alphanumeric characters.

Passwords shall not be constructed with:

• Words found in a dictionary
• Words containing personal information
• Previously used passwords
• Alphabet letters in succession, such as abcd, aaa, bbb
• Numbers in succession, such as 1234, 5432, 2468, 1111

See Tips on Creating Strong Passwords

Review password construction standards annually or more frequently as needed.