Password Selection Guidelines

• it cannot be the same as your first/last name or user-id;
   
• it must be at least 8 characters long;
   
• It must contain at least 3 of these 4 character types
  • Uppercase letters A, B, C ... 
  • Lowercase letters a, b, c ...
  • Numerals 0, 1, 2, 3, 4, 5, 6, 7, 8, 9
  • Symbols found on the keyboard (all keyboard characters not defined as letters or numerals) ` ~ ! @ # $ % ^ & * ( ) _ + - = { } | [ ] \ : " ; ' < > ? , . /
• the maximum password age is 180 days;
   
• the minimum password age is 7 days (you must wait 7 days after a password change to change it again);
   
• the password cannot be the same as any of your last five passwords;
   
• your account will be locked out after six (6) failed logon attempts;
   
• the password lockout duration will last 60 minutes, or until reset by authorized person;
   
• passwords should not be written down;
   
• passwords must be kept confidential – they must not be shared with another user;
   
• temporary passwords must be changed at the first logon

Oneonta's Password Policy can be found in the Information Technology Security Program at this link:  http://www.oneonta.edu/technology/security/ITSP.asp#password

There are many websites with good suggestions on how to build a strong password:

http://www.microsoft.com/athome/security/privacy/password.mspx
http://netsecurity.about.com/cs/generalsecurity/a/aa112103b.htm
http://www.newsforge.com/software/03/02/26/1639212.shtml?tid=2