Laserfiche WebLink
City of Arden Hills Personnel Policy <br />fit ILN HILLS <br />PASSWORD POLICY <br />General <br />Effective February 29, 2016 <br />Amended December 19, October 28 2019 <br />1. Passwords must be changed every 90 days. <br />2. Passwords must be unique from the past 10 passwords (you cannot use the same <br />password as before). <br />3. Users will be notified by system prompts two weeks in advance of password <br />expiration date. At this time,_ users will be prompted to select a new password. <br />Password Construction Guidelines <br />Passwords are used to access any number of City information systems, including the <br />network, database applications, email, and the Internet. Poorly designed passwords are <br />easily cracked, and put the entire system at risk. Therefore, strong passwords are necessary <br />to protect the integrity of the network data. Try to create a password that is also easy to <br />remember. <br />1. Passwords should not be based on well-known or easily accessible personal <br />information. <br />2. Passwords must contain at least 8 characters. A strong password would contain the <br />following: <br />• Contain characters from three of the following four categories: <br />• English uppercase characters (A through Z) <br />• English lowercase characters (a through z) <br />• Base 10 digits (0 through 9) <br />• Non -alphabetic characters (for example, !, $, #, %) <br />• Complexity requirements are enforced when passwords are changed or <br />created. <br />3. Passwords must not be based on an users' personal information or that of his or her <br />friends, family members, or pets. Personal information includes logon I.D., name, <br />birthday, address, phone number, social security number, or any permutations <br />thereof. <br />4. Passwords must not be words that can be found in a standard dictionary (English <br />or foreign) or are publicly known slang or jargon. <br />5. Passwords must not be based on publicly known fictional characters from books, <br />films, and so on. <br />6. Passwords must not be based on the company's name or geographical location. <br />97 <br />