Password guidance

If you believe your password has been compromised or you think you have responded to a phishing attempt, change your password.

If you notice any strange activity with your IT account, report it to the IT Service Desk so this can be investigated and resolved.

Creating a password

Protect your personal information by creating strong passwords for your University and personal accounts to keep them secure. For security reasons, we do not recommend writing your password down.

Never reuse your Loughborough email address and password to register for other online services – if any of those other sites are compromised, criminals may then have access to your University IT account.

Remember to ensure the password you choose is complex, difficult to guess, and follows the following rules:

Use different passwords for different services

Staff and Student accounts

  • 12 or more characters in length
  • MUST contain at least three out of the following four:
    • Uppercase letters
    • Lowercase letters
    • Numbers
    • Non-Alphanumeric characters (!"£$%^&*)
  • NOT contain any personal details including your name or IT username in any format e.g., @Jonathan123 or @ITStudent123
  • It must not be a password you have used before

Privileged accounts (e.g. -admin and -svc) 

  • 24 or more characters in length
  • MUST contain ALL of the following four:
    • Uppercase letters
    • Lowercase letters
    • Numbers
    • Non-Alphanumeric characters (!"£$%^&*)
  • Avoid common words and number combinations (e.g., "password"; "1234")
  • Replace characters with similar characters (e.g., o and 0; 5 and S)
  • Make passwords easy to remember by using the following:
    • Create an acronym
    • Use a memorable phrase
    • Use multiple common but unrelated words

You may want to create a phrase of multiple words, for example:

ILove1980s!Music or Lboro2022*IsGr8 or Sunny(22)Weather.

Device unlocking

For passcodes, PIN codes, or passwords used only to unlock a device (e.g. a smartphone or tablet), ensure one of the following credentials is in place:

  • Biometric (fingerprint, face ID)

Plus

  • Password (8 or more characters in length)

or

  • PIN (8 or more characters in length)

Where it's possible to configure, you should apply one of the following:

  • limit unsuccessful login attempt to allow no more than 10 guesses in 5 minutes
  • locking devices after more than 10 unsuccessful attempts.

How to reset your University password

Reset your password on a campus computer (students) or University managed laptop/desktop (staff)

You will need to be on campus or connected via the VPN to complete the following.

Log onto a University PC connected to the University network using your current username and password.

If it's a Windows Laptop with Trellix, log into Trellix first if prompted (Don't select the Change password option on the Trellix screen), then log into Windows.

  • Once logged in to Windows, press CTRL + ALT + Delete together, which will change the screen and list a number of options
  • Select ‘Change Password’
  • Provide your old University password and then you will need to enter your new password twice
  • Press ‘Enter’ to save the changes

Note: Please try to avoid restarting Windows encrypted laptops for approximately 90 minutes following a password reset.

If you do restart earlier, you may need to input your original password at the Trellix Encryption log on screen if your new password fails. You will then be presented with the Windows logon where you can use your new password.

Once your password has successfully been updated, remember to update this on all your other devices, for example, your mobile phone.

MacOS, Linux, personal computers or a computer not on the University network

For MacOS and Linux users, please try to find a Windows computer on the University network and follow the instructions above. If you are struggling to find a Windows computer you can find your nearest available computer lab by following the Computer availability link below.

In addition, a very basic password reset tool has been provided called SSRPM. For more information, please see the next tab.

Once your password has been successfully updated, remember to update this on all your other devices, for example your mobile phone.

Computer availability

Password reset system

Self Service Reset Password Management (SSRPM)

This is the University's password management system. You must enrol before you can reset your password using this system. If you do not know your password and have not enrolled, please contact IT Services.

Enrol

  • Go to https://passwordreset.lboro.ac.uk/ and select ‘Enroll into SSRPM’
  • You will be required to select 5 questions and provide answers
  • You can now reset your password via this system when needed

Resetting your password

  • Go to https://passwordreset.lboro.ac.uk/ and select ‘Reset your password’
  • Enter your University username
  • Answer the questions you are presented with
  • Final, update your password

Note: If you have previously enrolled on the tool but cannot remember your responses you can re-enroll.

SSRPM

IT Service Desk