It is suggested that you change your PennKey password regularly.
You can do so online here: https://weblogin.pennkey.upenn.edu/changepassword
Passwords must be:
Password must NOT be:
- All uppercase or all lowercase. (Examples: ivyleague, IVYLEAGUE, and jklasdf are not valid passwords.)
- Your PennKey username; your first, middle, or last name; or any variation thereof.
- Based on a dictionary word.
- "Dictionary" does not simply mean a standard English language dictionary — it also includes foreign language dictionaries and all kinds of specialized dictionaries that hackers use to crack passwords.
- Embedding a number or case-shift within a word does not make a valid password. Systematic password guessing attacks are sophisticated and will routinely 'crack' such passwords. (Examples: time2go, big$deal, ivyLeague, 2morrow, money$, and Ivyleague are not valid passwords.
- Composed of all numbers. Embedding decimal points, minus signs, or plus signs within a number does not make a valid password. (Example: 1-609-555-1212 is not a valid password.)
Selecting a Strong Password
The following approach can be helpful in choosing a strong password: Make up a sentence that's meaningful to you. Then use the first letter of each word as a letter in your password; if you wish, add additional characters to make it more difficult to guess.
- Start with the phrase such as Orange elephants invade Alaska; film at eleven.
- Take the first letter of each word as your password: OeiAfae
(This is an acceptable password; it follows the rules but is hard for someone to guess since it's essentially a random string of characters.)
- To make the password even harder to guess, add punctuation, numbers, and other non-alphanumeric symbols: OeiA;f@11
For more information about keeping your PennKey password and the network secure, click here.