Password Complexity, Expirations Rules, and a Screen Saver Inactivity Lockout

The University of Mary Washington requires the use of complex passwords for accessing university systems.  The use of complex passwords and an expiration requirement protects university systems and data.

Password complexity rules:

  • A password length of a minimum of 8 characters
  • At least one number and at least one letter required
  • At least one upper case letter required
  • At least one lower case letter required

Password expiration/change rules:

  • Must change password upon initial new user login
  • Must regularly change passwords every 90 days
  • Cannot reuse the same password again within 24 password changes
  • Cannot change password more than once in a 24 hour period

Screen Saver Lockout:

  • A Screen Saver Lockout will be set at 30 minutes of inactivity

Version History and Approvals

VersionDateStatusEdits/ChangesEdited by
V1.0January 3, 2011Final ReleaseApprovedD. German
V2.0July 31,2012RevisionAdded bullet four to complexity rules and screen saver timeout sectionR. Usler
V2.0July 31,2012Evaluation Review ReleaseApprovedJ. Webb