Password Creation Tips

General/Technical Documentation

Purpose

This general informational article will assist end users with Password Creation/Updates.

General Information

These rules will help create a strong password.

Technical Reference(s)

Password strength is important to protecting your personal information and devices from the latest threats. When creating passwords, create them with an emphasis on security as weak passwords can be easily deciphered. In accordance with Enterprise IT's new requirements, follow the password complexity rules below. 

Password complexity rules:

  • Must be a MINIMUM of 14 characters long

  • Must be a MAXIMUM of 32 characters long

  • Must contain at least 1 uppercase letter

  • Must contain at least 1 lowercase letter

  • May contain ASCll characters

  • May contain blank spaces

  • Cannot contain OSU related words

  • Cannot be a previously used password

  • Cannot contain three or more repeating values/sequential characters (111, aaa)

  • Cannot contain:  &  % `  ]  [  |  "  '  ;  :  < > 

  • Note: Person account passwords no longer expire. Service account passwords expire at 120 days.

Do not share your account password with anyone.  Should someone get a hold of your password, and knows your login address, that person has the key to sites that hold your financial information (grants, awards, etc), what courses you are attending and where, access to your Bursar account, access to your school email account, etc.  It is suggested that you not use your OSU credentials to set up external accounts such as personal banking accounts.

If you believe that your account credentials have been compromised, for fastest service, use the link in the related services and offerings section of this page.  Otherwise, contact the IT Helpdesk at helpdesk@okstate.edu or at 405-744-4357 (HELP) and change your account password as soon as possible.

Was this helpful?
0 reviews
Print Article

Related Services / Offerings (2)

Support required for identity management processing.
Report suspected or confirmed compromises of university accounts, such as unauthorized access or suspicious login activity. This service ensures rapid investigation, containment, and compliance with institutional security policies.