Information Security and Privacy 100%

Lesson 3 of 8 · about 1 minute

Passwords and two-step sign-in

Source: GCHS Information Security and Privacy Policy, Policy sections 5 and 6

0:00 / --:--

Reading

Your account is the front door to applicant information. Three rules keep it locked.

Make it long

Staff passwords must be at least 12 characters. A short phrase of several unrelated words is easy to remember and hard to guess. Add a number or special character. Do not use your name, a common password, or one from a data breach.

Change it at least every 365 days, and right away if you think it was exposed. Never reuse an old one. Change default passwords on routers and printers before you use them.

Two-step sign-in

Two-step sign-in is required on every account that can reach GCHS systems, including Microsoft 365 and the staff side of the GCHS Portal. If you get a sign-in approval request you did not start, say no, and report it.

Never share

Everyone gets a named account. Never share your login, even with a coworker you trust, and even for just one minute. Never write a password where others can see it, and never send one by email or text.

Previous lesson Next lesson