Effective in Fall 2014, each NetID owner will be assigned a password expiration date based on their last password change.

Here’s how this will work

• You can change your SU NetID password at any time before it expires. Your password expiration date is set one year out from the date you change your password.
• 30 days before your password expires, ITS will send to your official SU email address a warning notification that your SU NetID password will expire on a specific date. The first daily notifications will be sent on November 3, 2014. It may be several months before you receive a notification, depending on when you last changed your password.
• If you don’t change your password, you will receive additional warning notifications in advance of your password expiration date. Warning notifications will stop once you change your password.
• Accounts with unchanged passwords will be disabled on their expiration date. Password expiration and account disabling will occur every day, including weekends and holidays.
• If your account is disabled you will not be able to log into your SU desktop, MySlice, Blackboard, SU email (including SUMail), AirOrangeX, or any other University systems. Your mobile devices will no longer be able to connect to the University’s networks or resources.
• If your account is disabled, you will need to visit or call the ITS Service Center during regular business hours to have it re-enabled.
•  If you change your password more often than once a year, you will not receive any warning notifications.

FAQ

Why do I have to change my password every year?

“Routinely changing your password significantly reduces the window of vulnerability if your password is compromised without your knowledge,” says Christopher Croad, the University’s information security officer. “Not only is changing your password quick and easy, it’s one of the most effective ways for you to protect the University’s--and your own--confidential information.” 

It's good security practice to protect your and the University's information.  Passwords are proliferated across systems and become vulnerable the longer they are in use.  Passwords can be stolen without your awareness and can be used to access your data (email, pay information, grades, etc.) or to pose as you in criminal activity.  When you are no longer affiliated with SU, the eventual expiration of your password is a sure sign that you are no longer using the account.  This allows us to disable the account so it can't be hijacked.

Who is affected by the new policy for compulsory password change?

Everyone!  That is, everyone that has a NetID.

How can I find out when my password will expire?

You will be notified by email starting 30 days prior to the expiration date.  If you are concerned that you will not be connected to email for some duration in the coming year, change your password so that the expiration date will be set to one year from that day.

Do I have to wait until I'm notified to change my password?

No.  You should change your password anytime you think someone might know it.  Plus, you can change it anytime you want to.  Just go to http://its.syr.edu/netid/ and use the link to Change your Password.

Can I change my password expiration date?

Only by changing your password, at which time your expiration date will be set to one year from the day you changed your password.

How do I change my password?

Go to http://its.syr.edu/netid/ and use the link to Change your Password.

Will my new password be copied automatically to other systems and devices?

No.  Wireless devices (e.g. smart phones, tablets, etc.) may require that you logoff and then logon with your new password.  Some systems, such as OnBase and Hyperion, have a separate password and will need to be changed separately if you prefer to keep those passwords in sync.

What happens if my password expires?

Your access to the services and resources that depend on your NetID will be suspended.  This includes wireless, VPN, desktops, public labs, MySlice, Blackboard and email.

I think my password may have expired because my NetID doesn't seem to work anymore.  What do I do?

You need to call the ITS Service Center at 443-2677 to request that your account be re-enabled.  Before your account is re-enabled, the staff will ask you a series of questions so they can be sure you are who you say you are.  Then they will walk you through changing your password, because if you don't your account will become disabled again.

If you have separated from SU (resigned your job, graduated, etc.) and no longer need your NetID, you don't need to do anything.

When exactly do passwords expire?

Password expiration occurs once every day, even on Sundays, holidays, and while you're on vacation.  When you are notified that it's time to change your password, please do so promptly.  Expiration is scheduled to occur at 8:30am on the expiration date.  The email notifications indicate "midnight", but it would be bad practice to disrupt access at a time when the ITS Service Center is closed.