Security: Password Tips
The following article provides some general best practices for saving and protecting your passwords. Specific guidelines for UARK account passwords are at Passwords.
First, remember that passwords should be like underwear:
- Change them often.
- Be mysterious.
- Don't leave them lying around.
- Don't share them with friends.
Creating Passwords
Passwords should be at least eight characters long. Never use a password shorter than six characters. When you create a password, pick characters from at least three of the four "character groups":
- lowercase characters
- uppercase characters
- numbers
- special characters, such as !@#$%^&*)(><, etc.
Avoid dictionary words or combinations like "C0mput1ng" that use simple replacements in dictionary words.
Changing Passwords
Stronger passwords can be used for longer periods of time. A good rule of thumb is to change your password when it occurs to you; if you can't remember when you last changed your password, it's time to change it.
Change your passwords if you suspect they've been compromised. If you know they've been compromised, change the passwords and contact the security team in charge of that account. Contact security@uark.edu if your UARK account has been compromised.
Using Password Safe Tools
Get a password safe tool. Password safe tools generate strong, random passwords and save them in an encrypted vault. They then enter them for you on the website, preventing you from being tricked into entering your password on a fake site. If the password safe doesn't recognize the site, it won't enter the password. The following are recommended by the IT Services Security Team:
- Roboform: http://roboform.com/
- KeePass: http://keepass.info/
- 1passwd: http://agilebits.com/onepassword
- LastPass: http://lastpass.com/
If you need a password you can write down, consider using a "Password Card" from http://www.passwordcard.org. The size of a credit card, Password Card fits in your wallet. It allows you to pick secure passwords for all your accounts by selecting consistent criteria and using the card for reference. The card contains a unique grid of random letters and digits. By choosing a password length, color, and start symbol, a secure password is always at your fingertips. Remember to keep your Password Safe software updated.
Last Reviewed: