Protecting Your UConn Accounts

Keep your password private

Your login credentials, such as your NetID and NetID password, are unique to you. They protect the sensitive and confidential information you have access to by verifying your identity and authorizing your access. When you give others your credentials, they are using your unique identifier to access data and perform actions as you. This violates institutional audit controls, compromises the integrity of online approvals, increases the risk of data misusage, and exposes personally identifiable information (PII) to unauthorized users. When others use your credentials, any misuse is also linked to you.

  • Passwords are confidential, protected information. To keep your password safe, do not write it down, save it with corresponding account information or usernames, store it in an unencrypted file, share it, or let others see you type it.

  • Do not allow a coworker, colleague, or any other individual to access a system on your behalf using your credentials, including your supervisor or subordinates. This is contrary to policy even if you do not share your credentials. Contact ITS if you need an individual, such as a student employee or affiliate, to have access to a system and they do not have an account.

  • Always log off when you are no longer transacting in the system.

Create strong, unique passwords

When you set a NetID password on netid.uconn.edu, you are required to make it at least 12 characters long, and it must include special characters from the provided list. These requirements help you create a strong password – one that is hard to crack. You should make sure that you do not reuse passwords; each one should be unique. 

Longer, unique passwords are harder to remember. Consider creating passphrases. These sentences or phrases are easier to remember than nonsensical group of letters and numbers, and since they can be long, they are harder to crack.

Add a second layer of protection with two-factor authentication (Duo)

All active UConn affiliates are required to use two-factor authentication (2FA) to enhance security on systems that contain private information. It works by protecting the login process. You first log in with your NetID credentials (something you know) and then verify your identity with a physical device linked to your NetID account (something you have). This additional layer of protection prevents anyone but you from accessing your accounts, even if they have obtained your username and password.

Related Articles