Tufts Password Policy

February 28, 2013

The Tufts Username and Tufts Password are contemporary credentials provided centrally to individuals and maintained to help the community manage access to business critical, regulated, personal, private and other forms of information in the University. All systems at Tufts are encouraged to use The Tufts Username and Tufts Password authentication service. 

The Tufts Username lets systems and applications at Tufts know who you are.  Most Usernames are the first letter of your first name, and up to the first five letters of your last name followed by two numbers.

The Tufts Password is issued confidentially to individuals. It enforces the criteria outlined below.

Policy:
All University Systems should use the Tufts Username and Tufts Password system. While some business tools may require additional security, none should use a standard lower than what is expressed here. Systems that do not comply with the Tufts Username and Tufts Password standard should use all available techniques, and compensating controls. Legacy systems must use The Tufts Username and Tufts Password IdM system when they are suitably upgraded or finally replaced.

Standard for The Tufts Username and Tufts Password:

  • Passwords must contain the following:
    • Minimum password length: 8 characters (can contain more)
    • Passwords cannot contain parts of your account name or your full name that exceed two consecutive characters
    • Password history: 5 (your previous 5 passwords are invalid and cannot be re-used)
    • Passwords must contain characters from at least three of the following four categories:
      • English uppercase alphabet characters (A–Z)
      • English lowercase alphabet characters (a–z)
      • Base 10 digits (0–9)
      • Non-alphanumeric characters ( !@#$%^&*()-_+=;:´"}{[]|\`~))

Don’t use Tufts passwords for outside accounts

Consider the risks of disregarding this advice and using your Tufts password for your non-Tufts accounts. Passwords are stolen frequently and then cycled instantly to cause trouble and commit crimes; this can work both ways against you as well as against Tufts.

Tufts Username and Tufts Password FAQ

Yes. Tufts Tools provides a safe and convenient way (7x24x365) from anywhere in the world with Internet access to change your Tufts Password. Do it from a trusted computer.

If you believe your password is compromised, you should change it immediately using Tufts Tools and contact Tufts Technology Services, telling them of the incident.

All new students, faculty, staff, and affiliates are provided with a Tufts Username and Tufts Password when their Dean, Registrar, or Department manager requests it.

The Tufts Password provides authentication for most systems at Tufts. When you change it, all systems that use it (such as email) synchronize within a few minutes. If you've saved an old password in a browser or mobile device, you'll need to update those as soon as possible to avoid being locked out by your old, saved password. The lockout only lasts for 30 minutes; turning off a mobile device until you get support can help.

No. The Tufts Password is for you alone; it should never be written down, shared, e-mailed to others etc. as you may be liable for what others do. If a manager or co-worker asks you for your password, politely refer them here to this section.

It’s probably not a good idea. Using familiar names, birthdays or anniversaries makes your Tufts Password easier to guess for friends, family, and criminals.

Often, services that use The Tufts Username and Tufts Password display a distinctive logo. You can also ask Tufts Client Support or your local Support Provider.

Old SIS, PeopleSoft, Kenexa, and a few other systems do not use the Tufts Username and Tufts Password and sometimes must use unique usernames and/or passwords. Others have just not signed up yet for the centrally provided service. You can ask the school or department that provides the legacy service when they will be able to let you use The Tufts Username and Tufts Password.

If you have questions, please contact Tufts Technology Services: 

Call: 617-627-3376
Email: it@tufts.edu

Did you find what you were looking for on this webpage?