CSB/SJU Password Policy

This policy establishes conditions for use of and requirements for appropriate security for the College of Saint Benedict/St. John’s University (CSB/SJU) Network Account. These requirements are necessary to help ensure personal security and protect business, research and academic interactions throughout the CSB/SJU community.

The Network Account is a User ID and password combination that serves as the primary digital identity at CSB/SJU.  The Network Account provides access to a wide range of network services such as the Web, e-mail, shared network drives, a personal network drive and library resources.

This policy applies to every person using a CSB/SJU Network Account at any time or location. This includes all students, faculty, staff, retirees, continuing and distance education students and other College/University affiliates.

CSB/SJU Network Account Requirements

CSB/SJU requires newly activated Network Accounts’ passwords to be changed at first use. This ensures that only the person who has been assigned the account knows the password. All CSB/SJU Network Account users must comply with the Terms and Conditions for the Use of Information Technology.

IT Services retains a history of passwords. This means that previous passwords cannot be reused. IT Services strongly encourages account owners to avoid reusing old passwords.

Password Creation Guidelines

The following password creation guidelines are based upon experience and common sense.

• Use long passwords. Passwords must be at least eight characters.
• Do not use your username for any part of the password.
• Avoid using your first or last name in any part of the password.
• Use at least one numeral or special character in the first three characters of your password.
• Do not use all numbers.
• Do not use any single word that can be found in the dictionary as your password.
• It should not be information easily obtainable about you. This includes license plate, social security, telephone numbers, or street address.
• Passwords should not be reused. 
• Never share or write down your password.
• The strongest passwords contain characters from all four of the following classes

For more password guidelines and to evaluate the strength of your password, use Microsoft's "Password Checker" at: http://www.microsoft.com/protect/yourself/password/checker.mspx.  

Password Expiration

CSB/SJU requires that all CSB/SJU Network Account owners change their passwords annually.  Network users are strongly encouraged to change their password before it expires, in order to avoid disruption of access to network services. Passwords can be changed by following instructions at http://www.csbsju.edu/itservices/knowledgebase/data/passwords.htm.

Advance warnings of upcoming password expiration will be sent to the designated account holder via campus e-mail beginning 14 days prior to expiration, with repeated reminders several times thereafter until the expiration date. Any account holder may change his or her password at any time, it is not necessary to wait for expiration.

In addition to the CSB/SJU annual password change requirement, IT Services encourages individuals to change passwords more frequently throughout the year for higher security. The password should be changed immediately if an account owner believes that it has been compromised (for example, if there is a possibility that another person may have viewed or acquired the password).

Please direct questions related to this information to the Help Desk ext. 2228 or email helpdesk@csbsju.edu.