Electronic accounts using the VT Username identifier (including PID, HOKIES, Google, and Oracle/Banner) will incorporate new password complexity rules that leverage a common web service to determine the validity of passphrases when created. This change will increase consistency among the different accounts that use the VT Username. An entirely different process will apply to the system-generated Network Account password.

The new password complexity rules are being established by the IT Security Office (ITSO) and implemented by Secure Identity Services (SIS); they incorporate inversely graduated complexity as follows:

For PID/Google and HOKIES Passphrases
Allowed character set: Roman alphabet, numerals, and symbols on a U.S. keyboard

  • at 12-19 character length - mixed case letters plus either a numeral or a special character
  • at 20+ character length - no character set restrictions; any combination of mixed case letters, numerals or special characters
  • the normal space (spacebar) becomes a valid passphrase character
  • spaces may not appear at beginning or end of passphrase
  • 12 character minimum length
  • 64 character maximum length
  • uses same VT ITSO dictionary of disallowed passwords
  • it must not be equal to your last 5 passwords
  • cannot contain your VT Username backward or forward
  • cannot contain an sequence of 5 ordered characters or more, including repeated characters or sequences from a standard qwerty keyboard (abcde, qwert, 12345, aaaaa)

     

For Oracle/BannerPassphrase
Allowed character set: Roman alphabet, numerals, and symbols on a U.S. keyboard

  • at 12-19 character length - mixed case letters plus either a numeral or special character
  • at 20+ character length - no character set restrictions; any combination of mixed case letters, numerals or special characters
  • /, @, $, and " characters are additional invalid characters for Oracle
  • 12 character minimum length
  • 30 character maximum length
  • uses same VT ITSO dictionary of disallowed passwords
  • it must not be one of your last 5 passwords
  • cannot contain your VT Username backward or forward
  • cannot contain an sequence of 5 ordered characters or more, including repeated characters or sequences from a standard qwerty keyboard (abcde, qwert, 12345, aaaaa)