Password Security Policy

To maintain the security of your account and protect institutional data, the following password policy will apply effective November 1, 2025:

  • Password Expiry:

    • Users will be required to change their password at least once every 365 days (annually).

    • For accounts with Multi-Factor Authentication (MFA) enabled, the expiry period is extended to 730 days (two years).

  • Reminders:

    • You will receive automated reminders in advance of your password expiration date.

    • Please update your password promptly to avoid any interruption in access.

  • Best Practices:

    • Use a strong passphrase that is unique and not reused from other accounts.

    • Enable MFA whenever possible for additional protection.

This policy aligns with modern security standards (including NIST and Microsoft recommendations) to ensure your account remains secure while minimizing unnecessary disruptions.

Was this article helpful?