Email
Access mail@ucsf
VPN
HelpActive Directory (mail@UCSF) Password Protocols
To safeguard electronic information resources OAAIS has instituted strong password protocols for Campus Active Directory (AD)/mail@UCSF email accounts including Outlook Web Access. Enforcement will take place when new passwords are created.
This move anticipates adherence to consistent password protocols throughout the UCSF community. To learn more about the standard visit the Enterprise Information Security webpage.
Active Directory/ mail@UCSF Passwords:
-
Must contain a minimum of 7 characters.
-
Cannot contain:
- The user's account name;
- More than two consecutive characters of the user's full name.
-
Must contain characters from three of the following four categories:
- English uppercase characters (A through Z);
- English lowercase characters (a through z);
- Base 10 digits (0 through 9);
- Symbol characters (!, $, #, %).
-
Changes will be required every 180 days.
You must wait for 8 password cycles to pass before re-using a password. Your password can be changed once every 8 days. -
Your account will be locked after 5 incorrect entries.
An account that has been locked in this manner will be locked out for 15 minutes. -
Email reminders will be sent to your account at regular intervals to notify you of the pending password reset.
Reminder notices will be sent out at 21, 14 and 3 days prior to expiration.
EXAMPLES
Based on the account username: JDemoacct
Meets Requirements
- BF4ever! - exceeds minimum number of characters; includes characters from all categories
- !Oceans! - exceeds minimum characters; includes characters from 3 of the 4 categories
- 2bRnt2B - meets minimum characters; includes characters from 3 of the 4 categories
Does NOT Meet Requirements
- %Dem01@ - Containes more than 2 consecutive characters from username
-
acct!!! - More than 2 consecutive characters from username,
includes characters from
only 2 of the 4 categories - 2brnt2b - Contains only 2 character categories
More information can be found on our password reset FAQ's page.