Your Password: Launch of New Service and Changes to Password Policy
As part of ongoing improvements to information security, the University’s existing password reset service is being replaced by Microsoft’s Self-Service Password Reset (SSPR) service.
This change will require all staff and students to register for the new Self-Service Password Reset service, however any staff members already enrolled for Multi-Factor Authentication (MFA) will automatically be registered for Microsoft’s SSPR.
In addition, the University’s Password Policy is changing – passwords need to be longer, however they’ll require less complexity – which means that you may need to change your existing University password.
When will this change happen?
The new Self-Service Password Reset service is now live for use by staff and students.
You can register for the service and are encouraged to change your password to meet the requirements of the new Password Policy as soon as possible, before it becomes mandatory.
What do I need to do?
You should now:
1. Register for the Self-Service Password Reset service
To do this visit https://mypassword.napier.ac.uk/ and click Register for Self-Service Password Reset service
Please note - if you've already enrolled for Multi-Factor Authentication (MFA) you will automatically be registered for this service.
2. Change your password to meet the requirements of the new Password Policy
The new Password Policy can be found here: Password Policy
The main changes are:
- The minimum password length has changed to 15 characters.
- There will no longer be complexity requirements, i.e. you won’t need to use a mixture of upper and lower case letters, digits and special characters.
- Passwords will expire every 365 days, and must be changed whenever they are suspected of being, or known to be compromised.
Although the number of characters has increased, the removal of complexity means that you can use passphrases or random words to generate your password which will make it easier to remember – find out what makes a good password.
You can change your password at https://mypassword.napier.ac.uk
Do these changes also apply to students?
Yes, these changes will also apply to students.
New students will set their password using the new Password Policy and will be prompted to register for the SSPR service as part of their registration process. They need to know their email address to do this (4XXXXXX@live.napier.ac.uk).
The changes will be communicated to returning students, however we won’t retire the existing service until after the start of trimester 1. This will enable returning students to reset their password using the old system if required, e.g. if they’ve forgotten their password during the summer break.
Where can I find further information?
Further information about these changes including the next stages and frequently asked questions can be found on the Self-Service Password Reset Project intranet page.
Thank you for supporting Information Services through this essential work. If you have any questions or concerns please do not hesitate to contact the IS Service Desk in the first instance.