Choosing and Changing a Secure UMICH (Level-1) Password

Quick Link: Change my UMICH password now.

Forgot your UMICH password? See Resetting a Forgotten UMICH (Level-1) Password for how to reset it.

Contents

• Why You Need a Secure Password
• General Guidelines for Creating a Secure Password
• UMICH Password Complexity Requirements
• How to Change Your UMICH Password
• Update Devices Where Your Password is Saved
• Set Account Recovery Info in Case You Forget Your Password

Why You Need a Secure Password

Choosing a strong, secure password reduces the risk that your password will be guessed or stolen by a password thief. A password thief can use your password to access your email and send email in your name, change your personal information in Wolverine Access and the MCommunity Directory, or publish inappropriate or illegal material. A thief may also be able to use your password to break into U-M systems.

A strong, secure UMICH (Level-1) password is good for you and the U!

General Guidelines for Creating a Secure Password

In addition to the password complexity required by the site or service, the following tips can help you protect your password:

• Make your password long and memorable. The longer your password, the better. To help you make a long and memorable password:
  • Use a passphrase.
  • Consider a sequence of multiple unrelated words.
  • Some people find the Diceware method of generating passwords helpful.
  • Some people use a password manager to generate and store passwords.
• Select a unique password for U-M use. Do not use your UMICH password outside the university for other computing accounts. The university uses strong encryption methods to protect your password. If you use that same password for services that do not offer such protection, you put your UMICH password and account at risk.
• Turn on two-factor (Duo) for Weblogin. If two-factor (Duo) is not automatically required of you, you can turn it on to increase your protection. Faculty, staff, students, and sponsored affiliates are required to use Duo when logging in through Weblogin.
• Don't share your password with anyone—not even trusted family members or computer support staff.
• Use a different password for each online account. That way, if one password is compromised, your other accounts are not at risk. It is especially important that you refrain from using your UMICH password for non-university services.
• Use only secure programs when connecting to the U-M computing environment, such as the U-M Virtual Private Network (VPN), to protect your password and your data.
• If the service provides a logout feature, use it every time you exit the service.
• We recommend that you check your UMICH password security from time to time and change your password if it is at risk.
• If you must write down your password to help you remember it, keep it in a safe, secure place, and do not leave it where others could see it.
• Learn more about managing passwords at Safe Computing: Manage Your Passwords.

UMICH Password Complexity Requirements

When you change your password using UMICH Account Management, your new password will be checked for strength.

Your new password:

• Must be 15 characters or longer.
• Will be dynamically assessed for strength using an algorithm that calculates a strength score.
• Will be checked against a database of known breached passwords.
• Must not include parts of your name or uniqname.

How to Change Your UMICH Password

Michigan Medicine Only: You can log in to your Michigan Medicine profile page to change your UMICH (Level-1) password. See HITS Accounts & Passwords for information.

1. Go to UMICH Account Management and log in.

2. Click the Change UMICH Password icon.

3. In the New Password box, type your new password. The strength of your new password will be checked as you type.
   Tip: Click the eye icon next to each box to see your password as you type it.

4. In the Confirm Password box, retype your password.Then click the Set password button.

5. You will see a confirmation message when the change has been made.

6. If you are using a shared or public computer to change your password, close your browser and log out of the system after you are finished.

Allow a Few Minutes for Your New Password to Take Effect

Your new password must synchronize to several systems. When you change your UMICH password, you are actually changing several passwords at once. Your password change is synchronized to U-M systems and services by the UMICH Password Hub in MCommunity. Please be aware that the synchronization is not instantaneous. It can take several minutes for the process to complete and for your new password to work for some services, such as MWireless. Please wait a few minutes and try logging in again if your new password does not work immediately.

Lock and unlock your U-M Windows laptop. If you use your UMICH password to log in to your U-M Windows laptop, it is recommended that you lock and unlock your computer after changing your UMICH password. Wait a minute or two after changing your password, then

1. Lock the computer by pressing ctrl-alt-delete on your keyboard, then clicking the Lock this computer link.

2. Unlock the computer by pressing ctrl-alt-delete on your keyboard, then log in with your uniqname and UMICH password as you normally do.

Update Devices Where Your Password Is Saved

If you have stored your password on your phone or other mobile device, be sure to update your device with your new password. For example, if you access your U-M email on your phone, you will need to log in to the email application with your new password. You may also need to re-enter your password for MWireless.

Set Account Recovery Info in Case You Forget Your Password

You will be able to reset your forgotten UMICH (Level-1) password yourself if you set up account recovery information ahead of time. We can then send you a password reset code at the email address you provide if needed. See Set or Change UMICH Account Recovery Information for instructions.