Password Recommendations

Password Recommendations

It is mandatory that every account at the university have a strong password.  Many of our systems enforce strong passwords as well as password expiry.  Most Brock systems enforce the following password rules:

  1. Must contain at least 3 different types of characters:
    • lowercase (e.g., a b c d)
    • uppercase (e.g., A B C D)
    • numbers (e.g., 1 2 3 4)
    • special characters/symbols (e.g., ! @ #)
  2. Must not contain reserved/special characters (e.g., backslash '\') or spaces
  3. Must not be based on your first name, middle name, last name, email address, or login ID
  4. Must be between 8 to 30 characters in length
  5. Cannot be recently used or similar to a previous password (no password rotation)


Password Tips:

  1. Mix characters (e.g., TiD23#4ad34$3r)
  2. Replace letters with symbols (e.g.,"T3nnis$tar")
  3. Use a password phrase
    • Use the first letters of words in easily remembered phrases (e.g., "The cow jumps over the Brock Tower!" becomes "TcjotBT!")
    • Use easily remembered phrases without spaces (e.g., "MydogFluffyis#1!")
  4. Do not write down your passwords (write down a tip or clue instead)
  5. Do not share your passwords
  6. Change your passwords every few months

For other tips and resources visit: