User Tools

Site Tools


nimbios_11.04_change_password

Changing Your Password

There are a few times that you will want to change your password.

  1. You are a new user, and you can't stand the randomly-generated password that the IT staff has assigned to you.
  2. You are security-conscious and change your passwords regularly, whether they need it or not.
  3. You suspect that the password you have used in the past may be too easy to guess or may have already been discovered.

Whatever the reason, changing your password is easy as pie.

Good Password Hygiene

A strong password is important. Passwords should:

  • Be at least eight characters in length or longer
  • Contain upper- and lower-case characters
  • Contain at least one number or symbol
  • Does not contain any string (or substring) of characters that can be found in a dictionary or on a search engine
  • Be easy enough to remember that you don't need to write it down
  • Be unique to each system; do not re-use the same password here at NIMBioS that you use somewhere else

WARNING: To date these rules are not strictly enforced, however we have had incidents in the past where users with weak passwords had their accounts broken into. Let's be clear about this: Since NIMBioS is hosted by a university, we see hacking attempts no less than three times daily, every day, 365 days a year. A GOOD, STRONG PASSWORD IS CRITICAL!

Methods For Generating Good Passwords

Some tips on creating strong passwords:

  • Randomly replace letters with numbers or symbols
  • Pick a sentence or verse of a song and take every first letter (or every 2nd, or every last, etc.)
  • Take a word and reverse it
  • EVEN BETTER: Use multiple tactics from above, and make up your own tactics to add

For example:

Country Pop Metal
You've got to know when to hold them
Know when to fold them
Know when to walk away
And know when to run
Always something there to remind me
I was born to love her
And I will never be free
You'll always be a part of me
Head like a hole
Black as your soul
I'd rather die
Than give you control

Now take the first letter of each word…

ygtkwthtkwtftkwtwakwtr asttrmiwbtlhaiwnbfyabapom hlahbaysirdtgyc

You could stop here, except that this is still pretty easy for a brute-force password cracker to guess, since the lyrics for most songs are freely available online. So next we substitute some numbers for letters…

y67kw7htkwtftkw3wakw3r ast3rm1wbt1haiwnbfyabap0m h1ah5ays1rd3gyc

Now that's pretty darned strong! What's that? You say it's too long and too hard to type? You can truncate the string if you want, but make sure that it still meets the minimum length requirement…

y67kw7ht ast3rm1w h1ah5ays

There are also a number of password generators online:

Or you can use the random-string command from a terminal window.

Q: But a “strong” password is too hard to remember!

A: The IT staff use difficult passwords all the time that have been lovingly crafted by the best in completely heartless random number generators. They are very strong, and very hard to remember. Our secret is a little thing called muscle memory. Type the password over and over again, several times a day, until typing it becomes automatic. After a while, your fingers will just magically know what buttons to press.

Changing Your Password From The Terminal

If you are using a terminal or a login shell, or if you are logging in via SSH, then you can change your password with the passwd command. The passwd program will first prompt you for your current password (“Enter login(LDAP) password”), and then it will prompt you for your new password twice (“New password”, followed by “Re-enter new password”). You will not be shown the keys that you press as you type your password. This is normal, it's to prevent anyone looking over your shoulder from knowing your current or new password.

Example:

$ passwd
Enter login(LDAP) password: 
New password: 
Re-enter new password: 
LDAP password information changed for goober1
passwd: password updated successfully

If you see “password updated successfully” then congratulations, you have just changed your password. If you do not see “password updated successfully”, then something has gone wrong. Try again, or contact the IT staff for assistance.

Changing Your Password From The Desktop

If you are sitting at a NIMBioS workstation and you are logged in, then you can change your password by:

  1. Open the dash, and type “user” into the search bar
  2. Click “User Accounts”
  3. Click on the dots following “Password”
  4. Enter your current password, and press return
  5. Enter your new password twice, and then click “Change”
    You should see the text “Your password has been changed.” If you don't, then try again or contact the IT staff for assistance.

Password Recovery

Should you forget your password the IT staff can reset it password for you upon request.

nimbios_11.04_change_password.txt · Last modified: 2014/05/27 16:15 by peek