We are in the process of updating password security requirements for observer accounts in Echo.
As part of this change, observer passwords will be checked against known compromised passwords and subject to increased password strength requirements.
Because students range in age and access needs, student password policy requirements will continue to be managed entirely at the domain level. For all other roles, domain administrators can make password strength requirements and enforcement stricter, but cannot relax them beyond the minimums set by NTN.
What this means for observers
During the months of September and October, observers will begin seeing password reminders when they sign into Echo or change their password.
When changing or resetting a password, the system checks whether the new password:
- Meets the required level of password complexity
- Has appeared in known password breach data
If you see a warning on login that your password does not meet the requirements, you should update your password before Oct 19th to avoid being required to do so when signing in after that date.
Use these indicators and the Tips to create a strong password when changing your password.
NTN does not require a specific password format to meet complexity requirements. For example, users are not required to use a specific number of uppercase letters, lowercase letters, numbers, or symbols. Instead, users can meet the requirement in different ways, such as by using a longer password, a broader mix of characters, or a less predictable phrase.
For additional guidance, review NISTs password tips: How Do I Create a Good Password?
Why we're making this change
Compromised or easy-to-guess passwords can put observer accounts at risk. This update helps reduce that risk by preventing the use of passwords that are known to be unsafe or do not meet current security standards.
Please reach out to Echo Help Desk with any questions.
Comments
0 comments
Please sign in to leave a comment.