Proposed Password Policy

Proposed Password Policy:

The proposed password policy includes a new expiration timeframe and length requirement. The password policy will follow the guidelines outlined in the charts below.

The minimum password length will move from 8 to 12 characters long (for AD users, not MC users).  AD users will have a 12 character minimum password requirement when creating a new link blue account or changing an expired password. However, MC users will have an 8 character minimum password requirement. 

How often will a UK student be required to change their password?

If the user is a student and is not a UK student employee, his/her password will expire every 728 days.

How often will a UK student that is a student employee be required to change their password?

UK students, who are also student employees, will default to the employee group. Meaning, their passwords will expire every 181 days.

How often will UK campus staff employees be required to change their password?

Every 181 days.

How often will UK faculty be required to change their password?

Every 181 days

Campus Staff & Faculty Password Policy
(effective mid-Spring 2014)

Minimum Length

12 characters (or longest allowed) for AD employees; 8 characters for MC employees

Expiration

Every 181 days

Password History

8 password changes are required before reusing a previous password. (To prevent recycling passwords.)

Minimum Password Age

1 day. You may only change your password once each day. (To prevent recycling passwords.)

Lockout

After 150 attempts

Complexity or Composition

Must contain at least three of the following types of characters:

1.     Upper Case Letters: A through Z

2.     Lower Case Letters: a through z

3.     Numerals: 0 through 9

4.     Special characters

  • May contain non-alphanumeric characters
  • No more than 2 identical characters in a row
  • The password cannot contain the user's first name, middle name, last name, or username.

Student Password Policy
(effective mid-Spring 2014)

Minimum Length

12 characters(or longest allowed)

Expiration

Every 728 days

Password History

8 password changes are required before reusing a previous password. (To prevent recycling passwords.)

Minimum Password Age

1 day. You may only change your password once each day. (To prevent recycling passwords.)

Lockout

After 150 attempts

Complexity or Composition

Must contain at least three of the following types of characters:

1.     Upper Case Letters: A through Z

2.     Lower Case Letters: a through z

3.     Numerals: 0 through 9

4.     Special characters

  • May contain non-alphanumeric characters
  • No more than 2 identical characters in a row
  • The password cannot contain the user's first name, middle name, last name, or username.

 

859-218-HELP (859-218-4357) 218help@uky.edu