Guidelines for Selecting Passwords [ User's Guide to MPE/iX Security ] MPE/iX 5.0 Documentation
User's Guide to MPE/iX Security
Guidelines for Selecting Passwords
User accounts on the system must have passwords and all users share the
responsibility of protecting their individual passwords to ensure that
password integrity is not compromised. You will need to select a
password the first time you log into the system. Follow these guidelines
when selecting a password:
* Never use passwords that have anything to do with your personal
life, such as a spouse or child's name.
* Never use an english word or proper name.
* Never use an english word with a number at the end.
* MPE/iX will not let you start a password with a number.
* Never use your birthday, your street address, or any other number
that has anything to do with yourself.
* Never use any word spelled backwards.
* Never share passwords. When two (or more) people use the same
account, the system loses its ability to hold users responsible
for their actions.
* Never write passwords down. Some of the most notorious
penetrations have occurred because a user wrote a password on a
terminal.
* Never re-use a password. This increases the probability that
someone can guess the password.
* Never type a password while someone is watching. It is easy to
obtain a password by observing someone type it.
* Always pick a password that has numbers and/or special characters
interspersed, or use the password generator.
* Always use different passwords on different machines, but never
make them the name of the machine, nor the name of the machine
with a single number at the front or at the back.
MPE/iX 5.0 Documentation