UCInetID Password Policy

Your UCInetID is your key to online services at UCI. It serves as your single credential for most online services on campus. A poorly chosen password may result in unauthorized access and/or exploitation of UCI resources.  All users with access to UCI computing and networking resources are responsible for taking the appropriate steps, as outlined below, to select and secure their passwords.

Choose a secure password, and treat it as you would any other important piece of your identity information. You should also be careful when using public or shared computers, borrowing a computer from an acquaintance, or using public wireless networking.

Do not use the same password for UCI accounts that you use for other non-UCI access such as your personal banking, ISP, trading, etc.

Passwords must be changed annually to mitigate the risk of them being compromised without your knowledge and stored for later use.   Even if you’re not aware your password was stolen, if you change it periodically you may change it before a thief has an opportunity to use it.   If you believe your password may have been compromised for any reason, you should change your password as soon as practical. Visit activate.uci.edu and click the link labeled ‘Change My Existing Password’ to begin the process.

Password Change Notifications

Beginning Winter 2016, OIT will commence a one-time process of identifying all UCInetID passwords more than a year old, and contacting owners with a password change notification via email.  This will be done in stages, so that we can support one group of owners at a time through this process.

Once you have updated your UCInetID password, you can use that new password for up to a year.  One month before that year has elapsed, you will begin to receive reminders of the annual password change requirement.  You may change your password at any time.  If you change your password more often than once a year, you will not receive the email reminders.

Once you have received a password change notification or an annual reminder, you will have until the end of that month to change your password or risk having your UCInetID deactivated. Deactivated UCInetIDs will need to be reactivated with a new password before they can be used again.

Inactive accounts may be disabled after six months of inactivity.  If your account has been disabled, you may reactivate it by visiting the UCInetID Activation page.

Guidelines for Password Selection

Choosing a Good Password

Choosing a password can be a daunting task. You must choose one that no one can guess but you can remember! Here are some guidelines to help you.

  • You may not re-use any of your past passwords.
  • Pick a password that has at least 8 characters. Generally speaking, the longer your password is, the more secure it is.
  • Our system requires that your password contains at least one alphabetical character [a-z/A-Z].
  • Passwords are case-sensitive and can have both upper and lower case letters. Using MiXeD case in your password increases its security.
  • Our system also requires that your password contain at least one non-alphabetical character,which is not the first or last character of the password.
  • Including numbers and punctuation increases the strength of your password.
  • A good way to create a password is to think of a phrase and then use the first character of each word in the phrase, adding in punctuation and numbers.
  • Using a long phrase, up to 63 characters creates a very strong password/pass phrase

Things to avoid

  • Do not use your current password or any of your previous passwords. If someone previously obtained your password, they might try to use it again.
  • Do not use non printable characters such as those created by using the CTRL or ALT key on your keyboard.
  • Do not use alphabetic or keyboard sequential characters such as “abcde” or “qwerty”.
  • Do not use the same character more than twice. For example, we do not allow passwords that contain “aaa” or “jjj”.
  • Do not use any part of your Employee, Student, or Sponsored ID numbers.
  • Avoid using any part of your date of birth in your password.
  • Do not use your UCInetID, forward or reverse.
  • Do not use any part of your name, forward or reverse.

Password Tips

  • Remember to keep your password a secretDo not share it with anyone! It is your only protection from someone using your UCInetID and your are responsible for anything done with your account.
  • Change your password at least once per year.
  • You may not re-use any of your past passwords.
  • If you forget your password, you may re-activate your UCInetID if you know your password reset question. If you do not, you will need to visit the OIT Help Desk at Aldrich Hall room 115 and show them a photo ID to have your UCInetID enabled for re-activation.
  • If you need help, contact the OIT Help Desk by telephone at (949) 824-2222 or send e-mail to oit@uci.edu.

After You Change Your UCInetID Password

Bear in mind that if you recently updated your password on activate.uci.edu, you need to go through the following steps to enter the new password on your computers & mobile devices.

NOTE: If you are a UCI Gmail or UCI Office 365/Exchange user, please disregard the following instructions, as these only apply to ES Mail (aka “Webmail”) users.

Normally when your UCInetID password is changed or reset, you will be prompted for the new password the next time you open your email client and it attempts to connect to the server, as well as when you try to send a message. You can also be proactive and update your UCInetID password by doing the following.

Android

Android

  1. Tap the Settings app on the phone.
  2. Tap Accounts.
  3. Tap Personal (IMAP).
  4. Tap Account Settings.
  5. Tap your @uci.edu account.
  6. Swipe down and tap Incoming Settings.
  7. Place the cursor in the Authentication field and delete the password currently stored, then carefully enter your new password. Then tap Done.
  8. You’ll return to the previous menu. Then tap Outgoing Settings.
  9. Place the cursor in the Authentication field and delete the password currently stored, then carefully enter your new password. Then tap Done.
  10. Tap the Home button and then check your email, as well as send a test message to confirm.

Apple Mail

Apple Mail

  1. Go to Preferences–>Accounts.
  2. Select the UCI account on the left and then on the right, remove and then re-enter your UCInetID password.
  3. Then click the Outgoing Mail Server (SMTP) pulldown menu on the lower right and select Edit SMTP Server List.
  4. In the window that appears, make sure you select the UCI account up above and then down below, verify that Server Name reads smtp.uci.edu and TLS Certificate says None.
  5. Click on the Advanced tab.
  6. Make sure Automatically detect & maintain account settings is checked.
  7. Port number is 587 and make sure the box for Use SSL is checked.
  8. Authentication is set to Password.
  9. Make sure Allow insecure authentication is unchecked.
  10. Verify your UCInetID is in the username field.
  11. Remove and then re-enter your UCInetID password.
  12. Click OK to close the window and then close the Account Settings window.

iOS

iOS (iPhone, iPad)

  1. Go to Settings > Mail, Contacts, Calendars.
  2. Tap on your UCI Account.
  3. Tap on your email address.
  4. Verify the Host Name under the heading Incoming Mail Server reads imap.uci.edu.
  5. Swipe down and verify that the User Name field only has your UCInetID (not the entire email address) and then delete and carefully reenter the password.
  6. Swipe down and under the heading Outgoing Mail Server tap on smtp.uci.edu.
  7. On the next screen, under the heading Primary Server tap on smtp.uci.edu (it should say On on the right).
  8. On this screen, verify the Host Name under the heading Incoming Mail Server reads smtp.uci.edu.
  9. Verify that the User Name field only has your UCInetID (not the entire email address) and then delete and carefully reenter the password.
  10.  Tap Done to go back one screen, then tap Account in the upper left and finally tap Done.
  11. Tap the Home button on the iOS device and open the Mail app.

Microsoft Outlook

Outlook for the Mac

  1. Select the Tools menu and then click Accounts.
  2. In the right pane under Server information, enter a new password in the Password box.
  3. Near the bottom click the More Options button.
  4. Make sure the Authentication is set to Use Incoming Server Info and then click OK.
  5. Close the Accounts window to save the new password.

Outlook for the PC

  1. Open Outlook and select File > Account Settings, then click Account Settings again.
  2. Highlight the account you want to change the password on.
  3. Click Change and enter your new password in the Password field.
  4. Near the bottom right, click More Settings…
  5. Select the Outgoing Server tab and ensure that My outgoing server (SMTP) requires authentication is checked, as well as Use same settings as my incoming mail server. Click OK to close the window.
  6. Click Next. Outlook will test your new password. If the password was incorrect, a new window will appear. Carefully re-enter your password, check the box to Save this password in your password list and then click OK to run the test again. and if you’re successful, you will see a confirmation. Click Close.
  7. Click Finish to close the window and then click Close to close the Account Settings window.

Thunderbird

Thunderbird (Mac & PC)

  1. Open Thunderbird. (On a PC, go to Tools, then Options and then click the Passwords tab. On a Mac, click on the Thunderbird menu and select Preferences…)
  2. Click the Security button, and go to the Passwords tab. Click Saved Passwords….
  3. Click Show Passwords. You may be prompted for the master password.
  4. A box will appear that says Are you sure you wish to show your passwords? Press Yes.
  5. If you have opted to save both your incoming (imap://) and outgoing (smtp://) mail server passwords in Thunderbird, you will see them listed separately even though they are technically the same password, as shown below. To change a stored password, highlight it and press Remove. NOTE: If you are removing saved passwords because you have changed your UCInetID password, you will need to delete both in order to send and receive mail. Close all windows and quit Thunderbird. Then, reopen Thunderbird.
  6. Thunderbird will attempt to check the incoming server for new mail, at which point it will prompt you for a new password (provided you deleted the incoming server password). Enter the new password and check Use Password Manager to remember this password. Press OK.
  7. If you deleted your outgoing server password, you will be prompted to re-enter your password the first time you try to send a message from your account.

In addition to changing the password in the email clients on your computers and mobile devices, another service that will be impacted by the password change will be Eduroam. For those of you who use eduroam, please visit the main Eduroam page on the OIT website. At the bottom of the setup instructions for each device, you will see additional instructions on how to enter your new UCInetID password.