Password Security

Passwords are Your Key

Your passwords are your keys to many resources: email, personal files, student records, patient files, Facebook accounts and more. In many cases passwords are the one thing that prevents someone else from seeing something private or impersonating you online. There are several basic principles that you can follow that will go a long way in protecting the information that you have access to.

1. Choose a “strong” password. This means choosing a password that is 8 or more characters in length, and that includes upper and lower case letters, numbers, and special characters (such as &#*$@!). If you work in Emory Healthcare you should not include special characters in your password.

2. Never share your passwords with coworkers, friends or family. Don't share your password with IT staff, or people claiming to be IT staff. If you have shared your password with someone else, change it immediately.

3. Do not resuse your password. Reusing your Emory password on other sites only increases the chance that your account will be compromised if someone ever gains access to your credentials from another service.

4. Never write down your password. Your password isn’t a secret anymore if you write it down for others to find!

5. Don't log in for others. Even if you don't directly share your password with another person, allowing them to use a computer or application under your login has most of the same problems as sharing your password. You will be held accountable for actions taken by others while they have access to your account.

Alternatives to password sharing

Technology services, including those at Emory, are designed to be used without sharing passwords. The employee Exchange email and calendaring system has the option to grant others the ability to view your calendar or email if needed. The OPUS student system allows students to grant guest access for parents. Other systems like LearnLink and Blackboard have options for granting various levels of access to other people. Use these options rather than sharing passwords.

If you suspect that any of your passwords have been compromised, change them immediately for every account that uses that password. Emory University NetID passwords can be changed at https://enid.emory.edu/myaccount. Emory Healthcare account passwords can be changed by visiting http://www.ourehc.org.