This document describes how to create a safe and secure password, provides instructions for changing your UMICH password, and what to do if you forget it.

NOTE: Your UMICH password is also called your Kerberos or UMICH Kerberos password. This is the password you use to view your personal information on Wolverine Access and to use services provided by Information & Technology Services (ITS).

OTHER PASSWORDS? You may have other passwords at the University — such as Windows Active Directory or Groupwise. These guidelines offered here are equally valid for any password you may create.

Table of Contents

Why You Need a Secure Password

Your password allows you to authenticate — or prove your identity — when you access the U-M computing environment. Anyone having your password can assume your identity — you become a victim of identity theft.

Think of all the information you store on your computer and your University computing account. If someone else has your password, your electronic life — including e-mail, class projects, and your student account — becomes available. That person can send malicious e-mail in your name and modify or destroy your files.

Your password can also be used to commit fraud, post child pornography, send spam, make threats, break into other systems, and much more. If anything malicious or criminal is done through your account, you will have to prove you are not the culprit!

Table of Contents

Protect Your Password!!

• Select a unique password — not one you are using or have used elsewhere, such as for other computing accounts like AOL or HotMail.

• Don’t write down your password.

• Don’t tell anyone your password — even trusted family members and computer support staff.

• Use only secure programs when connecting to the U-M computing environment — programs that protect your password and usually your data.

• If the service provides a Logout feature, use it.

• Don't use any of the examples provided in this document; make up your own.

Table of Contents

Guidelines for Creating a Secure UMICH Password

TIP: Make a strong and memorable password by using the first letter of the words in a phrase, in combination with the other stated criteria. For example, "Four score and seven years ago our fathers brought forth" becomes 4S&7yaofb4th.

• Use 9 or more characters.

• DO NOT use plain dictionary words.

• Include at least 3 of the following criteria:

• lowercase letters

• UPPERCASE letters

• Numbers

• Punctuation (do not create a space with the space bar as the first or last character)

Table of Contents

Changing Your UMICH Password on the Web

1. Connect to https://accounts.itcs.umich.edu/kpasswd-bin/kpasswd.cgi

2. In the Change Your Password window:

   • Enter your uniqname and current UMICH password.

   • Enter your new password and, for confirmation, reenter it.

   • Click Set Kerberos Password.

3. In the Password Change Succeeded window:

   • You may enter a hint for remembering your password.
     WARNING! Do not enter your password as the hint.

     If you do not wish to enter a hint, click skip to the services page and proceed to step 8.

   • If you enter a hint, you must also select a challenge question and enter the answer.

   • Click Save and Continue.

4. You will receive a confirmation that your hint has been stored. Click the Service Menu link to continue.

5. At the bottom of the Services page, click Logout if you are finished using web-authenticated applications.

Table of Contents

Changing Your UMICH Password with a Terminal Program

1. Using a secure terminal program, connect to the ITS Login Service using the host name login.itd.umich.edu.
   MAC OS X TERMINAL USERS: Enter ssh login.itd.umich.edu.

2. Log in with your uniqname and current UMICH password.

3. At the login prompt, enter your uniqname and press Return or Enter.

4. At the Password prompt, enter your UMICH password and press Return or Enter.

5. At the % prompt, enter passwd and press Return or Enter.

6. At the Password for <youruniqname>@UMICH.EDU prompt, enter your current UMICH password and press Return or Enter.

7. At the Enter new password prompt, enter the new password you wish to use and press Return or Enter.

8. At the Enter it again prompt, enter your new password again and press Return or Enter.

9. You will see a Password changed notification and be returned to the % prompt.

10. At the % prompt, you may perform additional tasks or enter logout to finish.
    WARNING! Be sure to logout of your terminal connection program when you are finished.

Table of Contents

Forgot Your UMICH Password?

• If you used the web method to change your password, created a hint, and the login window provides a Retrieve your hint link, click on that link. You will be asked to answer the challenge question you selected. If your answer is correct, you will be provided your hint.

• If you are unable to answer your challenge question or did not create a hint:

• call (734) 764-HELP [764-4357] and select the option to reset your UMICH Kerberos password; you'll be connected to person who will verify your identity.

• take a photo ID — such as your Mcard or driver’s license — to the ITS Accounts Office.

Table of Contents

Additional Resources

Windows Internet Access Kit (S4269)

Macintosh Internet Access Kit for Mac OS X (S4298)

Using SSH Secure Shell to Connect to Host Computers [Windows] (S4304)

We welcome your comments; please send e-mail.

ITS’s Online Help Desk provides a variety of computing help resources.

For further help with your UMICH password, send e-mail to the ITS consultants or phone (734) 764-HELP.

Table of Contents

Appendix: Making Secure Connections

E-Mail

• mail.umich.edu
• Mulberry, also available from the mail.umich.edu website
• Eudora, when configured for the U-M computing environment

File Transfers, such as between your computer and your IFS Home Directory

• Windows: SSH Secure Shell
• Mac OS X: Fugu

Terminal Connections to Host Computers, such as the ITS Login Service and the Statistics and Computation Service

Download software and shortcuts for secure connections to commonly accessed U-M computers.

• Windows: SSH Secure Shell
• Mac OS X: uses the ssh protocol built into the Terminal program.

Information and Technology Services