Passphrase Requirements

What is a Passphrase

A passphrase is another word for a password however it encourages a sequence of words or other text rather then a single word to control access to a computer system, program or data. A passphrase is similar to a password in usage, but is generally longer for added security.  The passphrase at Royal Roads can also contain spaces, numbers and special characters. 

Why use a passphrase?

• When it comes to passwords, longer is better.
• Passphrases make it easier to remember longer passwords.
• Passphrases are much more resistant to password “cracking” tools.

What does a good passphrase look like?

• Minimum 15 characters, Maximum 25.

• We do not require, but strongly recommend a series of words, letters, numbers, spaces, symbols and/or caps

• When resetting your password, it can only be changed once every 24 hours

• Cannot be the same as a passphrase you've used the past 5 times you've changed

• We recommend phrases like "I love Poutine!", "rrunerdsarecute", or “Elton roCket man J0hn?”

What should not be in a good passphrase?

• Parts of your name or your network username.
• Names of family, friends, co-workers, pets, etc.
• Important dates, such as birthdates, anniversaries, etc.
• Common keyboard patterns: Zaq12wsx, qwertyuiop, asdfjkl;, etc.

Protect your passphrase

• NEVER use your RRU passphrase for any other accounts. It MUST be unique to RRU.
• Don’t share your passphrase with anyone else, including colleagues, supervisors, friends, etc.
• Got lots of passphrases? Consider getting a password manager.
• Consider protecting your accounts with Multi-factor Authentication (aka MFA)

Known issues

• 16 digit passphrases seem to give an error, so if your new passphrase is exactly 16 characters and not working, trying one with a different length

• Passwords with all numbers gave a student some difficulties

• Too long (more then 25 characters) can also be problematic

• If it constantly tells you the "confirm password" is wrong and you are using Safari, try a different browser like Chrome or Firefox instead.

Resources

Check out these great passphrase resources!

• https://haveibeenpwned.com
• Database of passwords stolen by cyber criminals in data breaches. If your passphrase is in here, don’t use it!
• Passphrase generators:
• https://bitwarden.com/password-generator/
• https://www.keepersecurity.com/features/passphrase-generator/
• Affirmation Passwords:
  • https://nypost.com/2023/10/11/affirmation-passwords-stay-secure-bring-positivity-to-your-life/

Did you get locked out?

• Your account will be locked out after 10 unsuccessful attempts.  You must then wait for 30 minutes for it to automatically unlock or if it's urgent, contact Computer Services to have the account unlocked.