must
be a minimum of 12 characters long, and
should
be longer
must not
have been used before
must not
have been exposed in a past data breach
Data breaches occur frequently, and in many cases result in the exposure of usersâ passwords
if the service provider does not adequately protect them. Once passwords have been exposed like this,
they are added to the âdictionariesâ used by hackers to try and access accounts. This exposure makes
them unsuitable to be used anywhere.
should not
be based on a single dictionary word
should not
use personal information, such as yours or family membersâ names or significant dates
should not
use repeating characters or keyboard patterns (e.g. mmmm3333, qwerty, 123456)
should not
be one you use anywhere else
Remember:
ALWAYS keep your password a secret!
IT staff will
never
ask you for your password.
Immediately report anyone who asks you for your password.