August 29, 2007

Improvements to UNM NetID Password Security

Information Technology Services (ITS) has implemented new security measures on passwords at the University of New Mexico as part of its effort to continuously improve security on UNM computer accounts (NetIDs), UNM systems and computer information.

In compliance with the new IT standard for passwords approved this spring, (Password standards) ITS has implemented a 180-day password expiration policy. On Aug. 27, 2007 the 180-day clock started ticking for refreshing passwords on UNM NetIDs. Essentially, all campus users must change their passwords at least once every 180 days. On Feb. 23, 2008, anyone who hasn’t changed their password since Aug. 27 will be required to change it on that day.

Password history...
After Aug. 27, 2007, a history of passwords for UNM NetIDs will be retained to prevent re-use of passwords. This provides additional security since if old passwords are known they won’t be effective in guessing current passwords. Users are able to change passwords more than once per day.

Challenge/Response questions...
When passwords for UNM NetIDs are changed after Aug. 27, 2007, users will also be able to set up responses to challenge questions, as an alternative authentication measure on top of passwords. Passwords can be reset through the challenge/response reset process, even if the password is not known.

For more information on computer accounts visit: Computer Accounts. For technical assistance please contact the Support Center at 277.4848 or go to: FastInfo and search for ‘password.’ For other issues or concerns on passwords contact Ivan Boyd, associate director, ITS at 277-8100 or boyd@unm.edu.

Media Contact: Steve Carr, (505) 277-1821; e-mail: scarr@unm.edu

Posted by scarr at August 29, 2007 11:06 AM