HP 3000 Manuals

Guidelines for Selecting Passwords [ User's Guide to MPE/iX Security ] MPE/iX 5.0 Documentation


User's Guide to MPE/iX Security

Guidelines for Selecting Passwords 

User accounts on the system must have passwords and all users share the
responsibility of protecting their individual passwords to ensure that
password integrity is not compromised.  You will need to select a
password the first time you log into the system.  Follow these guidelines
when selecting a password:

   *   Never use passwords that have anything to do with your personal
       life, such as a spouse or child's name.

   *   Never use an english word or proper name.

   *   Never use an english word with a number at the end.

   *   MPE/iX will not let you start a password with a number.

   *   Never use your birthday, your street address, or any other number
       that has anything to do with yourself.

   *   Never use any word spelled backwards.

   *   Never share passwords.  When two (or more) people use the same
       account, the system loses its ability to hold users responsible
       for their actions.

   *   Never write passwords down.  Some of the most notorious
       penetrations have occurred because a user wrote a password on a
       terminal.

   *   Never re-use a password.  This increases the probability that
       someone can guess the password.

   *   Never type a password while someone is watching.  It is easy to
       obtain a password by observing someone type it.

   *   Always pick a password that has numbers and/or special characters
       interspersed, or use the password generator.

   *   Always use different passwords on different machines, but never
       make them the name of the machine, nor the name of the machine
       with a single number at the front or at the back.



MPE/iX 5.0 Documentation