HPlogo User's Guide to MPE/iX Security: HP 3000 MPE/iX Computer Systems > Chapter 2 Accessing the System

Guidelines for Selecting Passwords

» 

Technical documentation

Complete book in PDF
» Feedback

 » Table of Contents

 » Index

User accounts on the system must have passwords and all users share the responsibility of protecting their individual passwords to ensure that password integrity is not compromised. You will need to select a password the first time you log into the system. Follow these guidelines when selecting a password:

  • Never use passwords that have anything to do with your personal life, such as a spouse or child's name.

  • Never use an english word or proper name.

  • Never use an english word with a number at the end.

  • MPE/iX will not let you start a password with a number.

  • Never use your birthday, your street address, or any other number that has anything to do with yourself.

  • Never use any word spelled backwards.

  • Never share passwords. When two (or more) people use the same account, the system loses its ability to hold users responsible for their actions.

  • Never write passwords down. Some of the most notorious penetrations have occurred because a user wrote a password on a terminal.

  • Never re-use a password. This increases the probability that someone can guess the password.

  • Never type a password while someone is watching. It is easy to obtain a password by observing someone type it.

  • Always pick a password that has numbers and/or special characters interspersed, or use the password generator.

  • Always use different passwords on different machines, but never make them the name of the machine, nor the name of the machine with a single number at the front or at the back.

Feedback to webmaster