The University uses the Windows Active Directory to manage access to online resources like shared folders, printers, e-mail mailbox, dial-in, e-learning, etc. on the campus network. A network username with a password is used to authenticate campus users, which is a form of identification or proof of your identity.
NTU Password/PIN Policy
- You are required to keep your network account password and StaffLink/StudentLink/GSLink PIN confidential at all times. Should you suspect another person of using your account, you should change your password or PIN, and report this to the Centre for IT Services immediately. Never reveal your password to anyone, including technical support personnel. CITS will never request for your network account password or StudentLink/GSLink/StaffLink PIN for any reason.
- For security reasons, you have to change your password and PIN every 180 days.
- The network account password, StaffLink and GSLink PIN must consist of alphabets (case-sensitive) and/or digits and it must be between 8 to 14 characters long. The StudentLINK PIN must consist of numbers only and it must be between 8 to 14 digits long.
- When selecting a new password or PIN, do not reuse your existing or previous passwords or PINs. Select a new password or PIN that you can remember, and yet is tough for others to guess.
- For security reasons, account will be locked after 6 wrong entries of password or PIN. Locked account will only be re-activated upon request by the account owner at the CITS General Office.
The following are some useful guidelines for using and managing your passwords:
- Complexity guards against the most basic kind of password cracking, namely a dictionary attack. Many viruses rely on weak usernames/passwords to gain administrative rights to a computer as well.
- Create strong passwords - make them longer than eight characters and try to use a combination of numbers and special characters.
- Avoid using names, your birthdays, NRIC, passport numbers, etc. as passwords. A password is a useful security measure only if it's kept secret and hard to crack.
- Change your passwords frequently and don't write down your password.
- If you use your password to log in to a resource or service i.e. Webmail, etc. be sure to log off when you're done.
- Never reveal your password to anyone, including technical support personnel that call you and ask for it. CITS will never request for your Network Account or PIN passwords for any reason.
- Avoid allowing a program or dialog box to save your password. Not only will you forget your password but you'll also allow an intruder easy access to your network resources like e-mail, e-learning, etc.
- Never give out your password or credit card number through Instant Messaging clients like MSN Messenger, ICQ, Yahoo! Messenger, etc.