Password FAQ

What is happening with NetID password requirements?

Beginning August 27, 2007, all UNM faculty, staff, students, and retirees with NetIDs will be required to change passwords every 180 days (approx. six (6) months).

Every NetID password will expire approximately February 23, 2008 and you will be required to create a new password.

As before, if you feel that someone has learned your password, or your NetID account has been compromised, you will be able to change it, and at that time the 180 day cycle will begin again.

A new web page is availble on August 27 which provides access to all password related activities including:

New UNM NetID creation
Change password if you know your current password
A new Challenge / Response feature which allows you to answer a series of questions, so you can change your password if you forget it. Remember, you should set up your challenge responses now, before you forget your password, you can then change it by returning to the NetID page and answering the Challenge questions.

All the NetID and password mangement activities can be completed at the NetID page.

Can you tell me more about the Challenge / Response feature?

At the NetID page, at Set up or Change Challenge-Response Answers, Click to setup/change your challenge-response answers, you will be prompted to confirm your identity with your NetID and current password.

At the Set Up Challenge Reponse page, type answers to five of the ten questions and click OK.

If you forget your password, you can return to the NetID page and Click to reset your password. Answer the five questions you previously set up and you can then change your password without contacting the Computer Accounts office at ITS.

What prompted the changes to password management?

In 2007, the results of a UNM audit found that a more secure password self-management system with password expiration was required. The ITEL system was discontinued around the same time which added to the need for students to self-manage passwords. The UNM auditors mandated a change and an identity task force met, resulting in Challenge Response and the NetID page. Each NetID password now expires and has to be changed every 180 days (approx. six months).

Are they any changes to the password format?

The password format has been slightly amended, the dollar sign ( $ ) is no longer an acceptable special character. The underscore ( _ ) and the pound sign ( # ) are still acceptable characters for passwords.

Are there any other changes?

A password history will be be kept for all NetID accounts, you will not be able to re-use a previous password.

Can you clarify how the password expiration works?

On August 27, 2007, all existing NetID passwords will be given the expiration date of February 23, 2008. A password will expire 180 days (approx. six (6) months) after the creation of a new NetID. A password expires 180 days (approx. six (6) months) after the last change to the password.

Will I be notified before my password expires?

Each NetID will be notified (via your preferred email address) 30 days, 15 days, seven (7) days, and one (1) day before password expiration. If you reset your password during the notification process (within the 30 days), no further email notifications will be sent. The first email notification will be sent on January 24, 2008.

Do these changes impact HSC NetIDs?

The HSC / Hospital NetID is separate from the UNM NetID. The changes have no effect on HSC NetIDs.

Additional Information and Help

See the Password Standard, and FastInfo answers 3556, 3557 and 2. For help, call the Support Center, 277.4848.