Passwords at Monash

Keep your account and information secure

• Create a strong password for your Monash accounts
• Change your password often – every three months
• Keep your password secret – never share
• Forgotten your password?

Create a strong password

A strong password:

• includes a mixture of
  • upper and lower case letters
  • numbers
  • symbols including the space bar
    
    
• is not a dictionary word or a simple string of letters or numbers
• is at least 8 characters in length (maximum 12)
• is difficult to guess (do not use your ID number, date of birth, children/pet names)

It sounds like it would be very difficult to remember a password with these characteristics, but if you look closely at the following example you will learn how to construct a password that is strong yet easy to remember.

Here is an example of a strong password: H1b!t2oYu>

At first, it looks like a tough one to remember - correct? Now think about this, remember the following song lyrics?

Happy birthday to you...

Take another look at the password. If you can remember a song, verse, poem or phrase that is unique or that has special meaning to you, then you can remember a password with upper and lower case letters, special characters and numbers.

Note: If you enter a low-quality password, such as words found in the dictionary, common names, or repeating characters, the ITS password system may reject your password and ask you to enter a new one.

Set a reminder personal identification word (PIW)

Your reminder personal identification word (PIW) can be used to identify you if you have forgotten your Authcate password and need to reset it.

Record or change your PIW

Change your password often – every three months

ITS recommends you change your password every three months to help prevent hackers from guessing it.
* If you think someone else has your password, change it immediately.

Change your password

Never share your passwords

You are responsible for keeping your password private.

Sharing your password is a breach of the Acceptable IT use policy and can lead to disciplinary action. 

If someone has your password and logs into your account you will be held responsible for their actions.
A third party can cause havoc to you by deleting files, reading private emails, sending offensive or abusive emails, sending spam emails or entering into financial transactions on your behalf and running up large bills.

Monash University will never ask you for your password.

Any emails you receive that appear to be from Monash asking for your password are not real and should be deleted.

Forgotten your password?

If you have set your personal identification word (PIW)

Visit the forgotten password page

Enter your username, Monash ID number, surname and given name. Select Submit.

Enter your personal information word. Select Submit.

You will now be able to create a new password.

No PIW?

Contact your local IT Support person or the ITS Service Desk

Note: if an IT support person gives you a password then you must change it within 12 hours.
If you don’t then the password will expire and will need to be reset again.
Contact your local IT Support person or the ITS Service Desk for further information.