Password Sharing Recommendations

Users of computer systems and networks are recommended to correctly identify and authenticate themselves through the use of unique, individual user IDs and passwords and to protect these unique identifiers and authenticators through adherence to the standards below. This recommendation applies to all accounts supported through University computer systems and networks. 

• Keep your password secret.
  
  
• Use passwords that you create following the rules of good practice for password creation.
  
  
• If it is necessary in order to get help with a problem or to facilitate correction of a system malfunction to provide access to computer systems or networks through sharing of your ID and password with technical personnel, the password should be changed immediately following correction of the problem.
  
  
• If you have either evidence or suspicion that your password has been appropriated by another person and/or your account accessed, the password should be changed immediately and the suspected violation reported.
  
  
• In situations where you need to have another authorized individual act as your delegated agent, follow the approved alternatives to password sharing that facilitate this action.

The following behaviors in use of one's user account, ID or password are bad practice and strongly discouraged:

• Use of another user's account, ID or password unless in an authorized circumstance as described above.
  
  
• Misrepresentation of identity of the sender, source, or authority of an electronic communication.
  
  
• Attempts to acquire, access, use, or alter the user account, ID or password of others.
  
  
• Use of user account, ID or password to represent a unit or entity of the University without appropriate authorization.
  
  
• Using University resources for individuals not associated with the University without proper authorization.

Emergencies

On rare occasions it may be necessary to share a password to achieve the mission of the institution during emergencies. In this case, the password should be changed as soon as
practically possible, following the resolution of the emergency.