Password Requirements:

• Must be minimum 8 characters (12 or more is better)
• Must contain at least three of the following four character types:
• English uppercase letters (A through Z)
• English lowercase letters (a through z)
• Numbers (0 through 9)
• Special Characters (such as !, #, $, %)

Password Best Practices:

• If you're going to use a single word as a password, do not use words that are found in the English dictionary, such as "Kittens1#" (Passwords should be nonsensical)
  
  
  • For example, take 2 words that come to mind, and combine them to form a nonsensical new word. Pirate + Violet = Pirolet
    • Now add some numbers that have no special meaning to you (ie. no bdays) = 553
    • Now add some special characters = #!
    • Your new secure password is Pirolet553#! (just an example, do not use as your password)
       
• Never reveal your password to anyone
• Do not reuse passwords for multiple accounts (IMPORTANT)
• It is not recommended to "save" your passwords in your web browser, but if you do so, use Windows Hello or a comparable method that requires you to authenticate prior to using stored passwords. Otherwise, anyone with physical access to your computer may be able to access your restricted accounts. 
• Use MFA whenever possible (MS Authenticator or Google Authenticator)
• For even better security, consider using a PASSPHRASE instead of a password

What's a Passphrase?

• • Passphrases are passwords that contain multiple words. The value of this method is in the length of the passphrase, as well as the complexity. 
    
    
  • Because passphrases are lengthier than passwords, it's ok to use dictionary words, which makes passphrases easier to remember. 
    
    
  • Examples include: BrownCanoeLemur129# (just an example, do not use as your password).
     
    • Effective Passphrases contain 3 words of five or more letters each, plus numerical digits and at least one special character.
      
      
• VCS IT recommends using a password manager to organize and store your many and varied passwords. Here are some options:
  • 1Password: https://1password.com/
  • Bitwarden: https://bitwarden.com/
  • KeePass: https://keepass.info/
  • Keeper: https://keepersecurity.com/
  • Password Safe: https://pwsafe.org/
  • Dashlane: https://dashlane.com/