Best Practice - Tips for a Secure Password

Skip to a section: Steps | Security Tips

Available to

Anyone with a PirateID user account

Overview

An ECU password must contain 3-4 of the following categories:

• Upper case letters
• Lower case letters
• Numbers
• Special characters (!, @, *)

Other password conditions include:

• A minimum of 15 characters
• No reuse of previous six passwords
• Cannot contain any part of your legal name (first, middle or last)
• Cannot contain your PirateID
• Should not start with a special character (some systems may not accept passwords that begin with a special character)

Create a secure password

Step 1.

Make up a sentence that is easy for you to remember. Example: "Today I ran on the treadmill for 2 miles!"

Step 2.

Pick items from this sentence to create your 15-character password: TiranonT2mile$!

Security tips

When creating your password, NEVER:

• Use any word contained in a dictionary, spelling list or other word list in any language.
• Use the word, password, as your password. This includes using numbers or special characters to make the word look different.
• Use personal information to form your password, including any part of your name.
• Use transformations such as reversing the spelling, changing upper case to lower case or using all caps.
• Write down your password and post it in an easily-guessed location.
• Select a password that is common to everyone (Go@Pirates!) or in any way includes the word, Pirates.

Password security for faculty and staff

• NEVER give your password to anyone. Not even your supervisor can ask you to disclose your password.
• Do not reply to emails requesting your personal information. These emails are fraudulent.
• If you think someone may have obtained your password, change it immediately using the password maintenance portal and notify the IT Service Desk at 252-328-9866.
• Don't reveal personal information on the phone. Identity thieves are known to ask seemingly innocuous questions that reveal confidential information.
• If an ITCS service technician needs your password, you will be asked to type it in yourself. Ask for identification if you are not sure about the person.
• DO change the password after the technician leaves.
• Never use the "remember this password" feature in your browser.
• ALWAYS lock your computer whenever you leave it.
• Turn off your office computer at the end of your work day.