The user must not use the password associated with the UPB account to register with other systems (e.g. homebanking, FCT, Skype, Gmail, etc.).
Author Archives: Sara Morgado
Rule 4
Whenever authentication and access authorization is required, a user code and password will be used that meet the requirements described below, defined according to the user’s relationship and usage profile with the institution.
Rule 5
You should always avoid using simple or obvious passwords (e.g. the same as your user code, student or ID number, initials of your name, …).
Rule 6
The password must be complex and have at least: For most users: 9 characters; For users with administrative responsibilities: 13 characters. Its composition requires the inclusion of 3 of the following 4 sets of characters: lowercase letters (a…z) capital letters (A…Z) numbers: (0…9) special characters: |!#$%&()=.:,;*<>@ It cannot contain the following characters (which are considered …
Rule 7
Passwords are stored in non-reversible mode.
Rule 8
Passwords are stored centrally in encrypted form and are known only to each user.
Rule 9
Passwords should always be encrypted or protected by secure protocols between the central authentication system and the applications.
Rule 10
If there are systems that, exceptionally, cannot implement the defined password policies, users must be informed of the local policies in place.
Rule 11
The UPB IT Services technical team never asks the user to provide a password.
Rule 12
A self-service mechanism will be made available for setting new passwords, which requires unequivocal proof of the User’s identity.