Tips for creating a secure password/passphrases

To protect Vol State information resources, all domain users (faculty, staff, and students) are required to change their Vol State passwords every 730 days (two years). More often is recommended.

When updating your password/passphrase the passphrase must be a minimum of 16 characters, a maximum of 256 characters, and MUST NOT contain ANY part of your name, username, or V number. 

Passwords must contain characters from at least three of the following four categories:

  • English uppercase alphabet characters (A-Z)
  • English lowercase alphabet characters (a-z)
  • Base 10 digits (0-9)
  • Non-alphanumeric characters

In addition to these requirements, passwords/passphrases should never be shared, written down, or e-mailed to others. Users cannot reuse any of their previous ten passwords.

What is a passphrase?

A passphrase is a password.  

In the past we have all been told to create passwords with upper and lower case letters, numbers, and special characters like JkLp20*&QX2z!.

  • The problem is that type of password is hard to remember and not too hard for a cybercriminal to crack using today's sophisticated tools.

A passphrase is a longer combination of words that is hard to guess but easy for you to remember.

  • Creating a great passphrase is easier than ever now that blank spaces are permitted as characters and much easier for users to remember than a string of random letters, numbers, and special characters.

A passphrase can be created once you have selected the green "Set/Reset Password" box through the Password Reset Utility

  • Passphrases must still be a minimum of 16 characters, a maximum of 256 characters, and MUST NOT contain ANY part of your name, username, or V number. 

Tips for creating a good passphrase

Please Note: All examples below are written just as you would enter them in a password field including blank spaces. DO NOT USE THESE EXAMPLES!

Create a passphrase by putting together words that go together in your mind, based on the way you think and make associations between objects, people, rooms in your house, etc. Note that each example uses at least 3 of the 4 required character types. Examples below can give you some ideas on creating your OWN UNIQUE PERSONALIZED passphrase.

What are some good examples?

Ninja Turtles definitely consume more pizza than humans!

Socks with sandals? Fashion genius!

Luke Skywalker sported serious helmet hair, right?

Alexa, play my 3 favorite party songs by Bach and Haydn.

juggling Chainsaws isn't a stellar career choice.

John Rambo, unleashing the fury of the headband.

Nobody puts Baby in a corner. Nobody! -Johnny

Remember to wear your pants, even for Teams calls.

Meatloaf, smeatloaf, double beatloaf. I hate meatloaf.

Darth Vader reveals a shocking family truth, on the next Oprah!

What's important?

  1. Passphrase length: make your passphrase at least 16 characters long. 256 characters is the maximum.
  2. Make the passphrase unique to your thinking and not a popular phrase like “Who’s on First?”
  3. Create a unique passphrase for each account you own.
  4. Creating a passphrase/password is only one part of staying secure and keeping your information safe.

What to avoid?

The temptation to use loved one's names, birthdays, and anniversaries should be avoided, because "easy to remember" can also become "easy to guess." In a world where hackers use sophisticated software to crack passwords, an easy password is an open invitation. The challenge is to create something that is memorable for you but tough for others to decipher.

  • Don’t use your phone number, address, birthday, or other private information in your passphrase. Stay away from phrases that start with “I love…,” or “I hate….” Don’t use common sentences like:
    • Four score and 7 years ago… (Gettysburg Address)
    • This day will live in infamy.  (Pearl Harbor Address)
    • Trust no one  (X-Files' Fox Mulder's password)
    • Mittens Joe Bandit Jack (the names of your four children or pets, for instance)
  • Never use the same password for more than one account.
  • Don’t use keyword patterns like QWERTY, ABC123, or 54321.
  • Never share your password with anyone, in any form. Ever.
  • Never believe that a strong passphrase is the only thing you need to be secure online. Take your role in Cybersecurity seriously. 

Protect yourself at all times.

Need Help?

Contact the IT Help Desk at (615) 230-3302 with any questions or feedback.

 

Print Article

Related Articles (5)

Learn how to activate or change your Vol State student password (to access the campus network (wired & wireless), D2L/eLearn, Degree Works, email and the library databases) or look up and obtain your username.
This article reviews the different types of phishing emails and the best way to manage those and avoid falling for them.