Bridgeton Public Schools

Technology Department User Account Password Policy Requirements

Description

The Bridgeton Public School District Technology Department places the highest value on the security of our Staff and Students. Through several layers of protection, including the policies below, we can decrease the likelihood of an account becoming compromised. To aid in the adoption of these policies, we have provided the details of our layered password policy. This should help Students, Parents, and Staff reset account passwords with minimal trouble. Please go to Microsoft’s Password Reset site to reset a forgotten password. We acknowledge that there may be some issue with this and will take considerations on a case by case basis. Active BPS staff can also request a password change for a student or a group of students by using this site. Training will be available upon request.

Staff and Student passwords are set by default to a standard. The standard for Staff is a combination of elements unique to the employee and available upon request from the Technology Department. The password is also provided to the employee upon the start of their employment. The standard for student passwords is the same for all students. Students are required to change their password upon their first log on to the computer system.

Password and account policies

• NO STAFF are permitted to maintain a list of password for any user, including students
• NO STAFF OR STUDENTS are permitted to share their user account information (username and password combination)
• NO STAFF OR STUDENTS are permitted to log on to a system as another user

Violation of the above conditions may result in suspension of access for the user or users that are identified following an investigation of the incident, per Board Policy 6142.10.

Staff Using Duo (MFA)

• Previous three (3) passwords will be remembered
• Passwords are valid for 365 calendar days from the date the password was last set
• Passwords MUST be older than one (1) calendar day before they may be changed again
• Passwords MUST be a minimum length of six (6) characters
• Passwords MUST meet complexity requirements SEE BELOW
• NO PASSWORDS ARE STORED IN A MANNER THAT ALLOWS THEM TO BE KNOWN OR DISCOVERED

Staff Not Using Duo (MFA)

• Previous fifty (50) passwords will be remembered
• Passwords are valid for thirty (30) calendar days from the date the password was last set
• Passwords MUST be older than one (1) calendar day before they may be changed again
• Passwords MUST be a minimum length of twenty-five (25) characters
• Passwords MUST meet complexity requirements SEE BELOW
• NO PASSWORDS ARE STORED IN A MANNER THAT ALLOWS THEM TO BE KNOWN OR DISCOVERED

Students Pre-K Through 4th Grade

• NO previous passwords are remembered
• Passwords DO NOT expire
• Passwords MUST be older than one (1) calendar day before they may be changed again
• Passwords MUST be a minimum length of six (6) characters
• Simple passwords ARE allowed
• NO PASSWORDS ARE STORED IN A MANNER THAT ALLOWS THEM TO BE KNOWN OR DISCOVERED

Students 5th Grade through 12th Grade

• Previous two (2) passwords will be remembered
• Passwords are valid for 365 calendar days (one year) from the date the password was last set
• Passwords MUST be older than one (1) calendar day before they may be changed again
• Passwords MUST be a minimum length of eight (8) characters
• Simple Passwords ARE allowed
• NO PASSWORDS ARE STORED IN A MANNER THAT ALLOWS THEM TO BE KNOWN OR DISCOVERED

Passwords subject to complexity requirements must meet the following minimum requirements:

1. Not contain the user's account name or parts of the user's full name that exceed two consecutive characters
2. Be at least six (6) characters in length
3. Contain characters from three of the following four categories:
   1. English uppercase characters (A through Z)
   2. English lowercase characters (a through z)
   3. Number (0 through 9)
   4. Non-alphabetic characters (for example, !, $, #, %)
4. Complexity requirements are enforced when passwords are changed or created.