Projects related to getting the campus into compliance with this policy are currently under development or in progress.
Passwords used to access university systemsDevices and applications accessed via the network. must meet the criteria established in the Office of Information Technology guidelines for passwords. Passwords must be changed at least annually to minimize unauthorized access to university systemsDevices and applications accessed via the network.. Passwords must not be shared, except for approved exceptions.
- Password Standards
- Nevada System of Higher Education Procedures and Guidelines Manual, Chapter 14: Data and Information Security, Sections 2.1 and 3.3 (PDF)
Statement of Purpose:
The purpose of this policy is to:
- Ensure that access to university systemsDevices and applications accessed via the network. is consistent with security best practices.
- Establish minimum standards for passwords.
- Ensure that all users are aware of their responsibilities in effective password management.
Entities Affected By Policy:
Entities affected by this policy include all UNLV academic and administrative offices and all UNLV students, employees, and anyone who accesses university systemsDevices and applications accessed via the network..
Who Should Read This Policy:
UNLV students, employees, and anyone who accesses university systemsDevices and applications accessed via the network. should read this policy.
To request an exception, please complete the OIT Policy Exception Form.
Exception requests will be processed within 10 business days of receipt of the request. If an exception is created, the exception will be audited on an annual basis. The owner of the system or a listed designee must respond to the annual audit and verify that the exception is still required.
Changes to the exception may only be requested by the system ownerA full-time UNLV employee who is responsible for the system, knows the function(s) of the system, authorizes access, knows who the data owners are, and understands what data the system stores, processes, or transmits. or a documented designee appointed by the owner.
Frequently Asked Questions:
Is it okay to keep my password on a sticky note and keep it near my computerAny university-issued desktop or laptop, listed as property of UNLV/NSHE on the university inventory list, regardless of whether the desktop or laptop is properly labeled or tagged as such. as long as I do not share the stickie note with anyone else?
Should I provide my username and password if asked to do so by someone from OIT?
Impersonating an IT staff person is a common ploy used by identity thieves to gain access to password-protected informationInformation provided at the direction of UNLV or to which access was indirectly obtained in the course of contractor's performance of services, that: is an education record, protected health information, or personally identifiable information; identifies any individual (by name, signature, address, telephone number, email address, or other unique identifier); can be used to authenticate any individual (including, but not limited to, any employee identification number, Social Security number, driver's license number or other government-issued identification number, passwords or PINs, biometric or health data, answers to security questions, or other personal identifiers); or, includes credit card, debit card, or other financial information. UNLV business contact information is not, by itself, protected information. . If an OIT staff member or someone claiming to work for OIT asks for your password, please decline to provide the information and call the IT Help Desk at ext. x50777 or email ithelp [at] unlv [dot] edu to report the incident.
Why can't I give out my password to my coworkers because OIT is coming to work on my computerAny university-issued desktop or laptop, listed as property of UNLV/NSHE on the university inventory list, regardless of whether the desktop or laptop is properly labeled or tagged as such. and I won't be in when they are here?
My wife is not a student. Can I share my password with her so that she can look for a job while I'm in class?