1-HELP Technology Services

Office of Information Technology

What's inside

Did this page help you?

U of M Internet Password

Together, your Internet ID and password act as a key to many online tools and services offered by the University. When you log in (sign in), your Internet ID identifies you, and your password authenticates you as the owner of that ID. You are probably familiar with this "username and password" concept in other systems.

Quick Facts

  • Password length: 8 characters minimum, 125 characters maximum
  • Expires once per year
  • Used for self-service applications and common online services such as e-mail, wireless Internet, course registration, UMCal, and pay statements.

Choose a good password

It's important to choose a good (strong) password since there are many password-cracking programs readily available on the Internet. Here are some tips for selecting a strong password:

Do

  • Include numbers and non-alphanumeric characters: [ ] { } | \ ; : ' " < > ? / ~ ` ! @ # $ % ^ & * ( ) _ - + =
  • Use uppercase on more than the first letter (passwords are case sensitive).
  • Employ strategies for an easily remembered complex password. For example, use the first letter from each word in a phrase: C$200wpG represents "Collect $200 when passing Go".

Don't

  • Select a new password by simply changing one character in your existing password.
  • Use the same password on important and trivial systems (e.g., production and test systems).
  • Use words and numbers that can be easily associated with you, such as your birth date, name, spouse/child/pet name, or address.

Safeguard your password

It is extremely important that you do not share your password with anyone, as this would grant another person access to everything normally restricted to you, including private information such as grades and pay statements. Choose a good password that is both easy for you to remember and difficult for others to guess. Additionally, keep the following in mind:

  • Never send a password by e-mail.
  • Avoid writing down your password at all — write down hints, but not the password itself.
  • If you need to write it down, keep it in a secure location (e.g., in your wallet or in a locked file) — never leave it on or in your desk.
  • Do not disclose your password to others, including system administrators. If you do share your password for some reason, make sure you change it immediately.
  • Never store a password in an electronic file or use the "save my password" feature.
  • When leaving a public computer (kiosk or public lab), completely log out and quit the application before you leave.
  • When leaving your computer, even for a short amount of time, completely log off or otherwise secure your computer from unauthorized use.
  • Be aware of phishing. Hackers try to trick people into giving away their passwords and other personal information by sending fake e-mails that appear to come from common Web site such as eBay, PayPal, or local banks.

Password changes

For security reasons, it's a good idea to change your password at least once a year. Additionally, if you suspect that your password has been compromised, you should change it immediately.

Forgotten password

If you do not remember your Internet password and you are a student, you may use the self-service password reset option. If you are not a student or are otherwise ineligible for the self-service option, please call 1-HELP, and a helpline consultant will reset your password after properly verifying your identity. Alternatively, you may bring a photo ID (UCard, valid state ID, or current passport) to one of our helpdesks. Password changes cannot be completed via e-mail.

Password expiration

Internet passwords expire once they become one year old. If your password expires, the next time you attempt to log in to a secure Web site, you'll be required to change your password before proceeding. The system will automatically direct you to the password change screen. E-mail notices of upcoming password expiration are sent two weeks and then again one week before the password expires. Copies of these e-mail notices are available. We will NEVER require you to send your password via e-mail.

Limit helpline-assisted password changes

If you suspect that someone else has enough identifying information to call 1-HELP and reset your password, you may require that helpline consultants identify you in person — not via telephone — before resetting your password. Think carefully when choosing this option! Until you remove the limitation, 1-HELP can reset your password only in person, on campus, at one of our helpdesk locations.

Related