Tufts Username and Password Policy

Revised July 3, 2020 | For additional information, contact it@tufts.edu.

The Tufts Username and Tufts Password are contemporary credentials provided centrally to individuals and maintained to help the community manage access to business critical, regulated, personal, private and other forms of information in the University. All systems at Tufts are encouraged to use The Tufts Username and Tufts password authentication service. Inquiries and requests regarding Tufts' authentication service can be submitted to the 24/7 TTS Service Desk by calling 617.627.3376 or emailing it@tufts.edu.

The Tufts Username lets systems and applications at Tufts know who you are. Most Usernames are either the first letter of your first name and up to the first five letters of your last name followed by two numbers or the first two letters of your first name and up to the first three letters of your last name followed by two digits. For example, Jane Jumbo’s username could be either jjumbo01 or jajum02.

The Tufts Password is issued confidentially to individuals. It enforces the criteria outlined below.

Policy:
All University Systems should use the Tufts Username and Tufts Password system. While some business tools may require additional security, none should use a standard lower than what is expressed here. Systems that do not comply with the Tufts Username and Tufts Password standard should use all available techniques, and compensating controls. Legacy systems must use The Tufts Username and Tufts Password Identity Management system when they are suitably upgraded or finally replaced.

Standard for the Tufts Password:

  • Passwords must contain the following:
    • Minimum password length: 10 characters (can contain more)
    • Passwords cannot contain parts of your account name or your full name that exceed two consecutive characters
    • Password history: 24 (your previous 24 passwords are invalid and cannot be re-used)
    • Passwords must contain characters from at least three of the following four categories:
      • English uppercase alphabet characters (A–Z)
      • English lowercase alphabet characters (a–z)
      • Base 10 digits (0–9)
      • Non-alphanumeric characters ( !@#$%^&*()-_+=;:´"}{[]|\`~))

Don’t use Tufts passwords for non-Tufts accounts

Consider the risks of disregarding this advice and using your Tufts password for your non-Tufts accounts. Passwords are stolen frequently and then cycled instantly to cause trouble and commit crimes; this can work two ways: against you as well as against Tufts.

Tufts Username and Tufts Password FAQ

Yes. Tufts Tools provides a safe and convenient way (7x24x365) from anywhere in the world with Internet access to change your Tufts Password. Do it from a trusted computer.

If you believe your password is compromised, you should change it immediately using Tufts Tools and contact Tufts Technology Services, telling them of the incident.

All new students, faculty, staff, and affiliates are provided with a Tufts Username and Tufts Password when their Dean, Registrar, or Department manager requests it.

The Tufts Password provides authentication for most systems at Tufts. When you change it, all systems that use it (such as email) synchronize within a few minutes. If you've saved an old password in a browser or mobile device, you'll need to update those as soon as possible to avoid being locked out by your old, saved password. The lockout only lasts for 30 minutes; turning off a mobile device until you get support can help. For support, contact the 24/7 TTS Service Desk by calling 617.627.3376 or emailing it@tufts.edu.

No. The Tufts Password is for you alone; it should never be written down, shared, e-mailed to others etc. as you may be liable for what others do. If a manager or co-worker asks you for your password, politely refer them here to this section.

It’s probably not a good idea. Using familiar names, birthdays or anniversaries makes your Tufts Password easier to guess for friends, family, and criminals.

Often, services that use The Tufts Username and Tufts Password display a distinctive logo. You can also contact Tufts Client Support Services or the 24/7 TTS Service Desk by calling 617.627.3376 or emailing it@tufts.edu.

PeopleSoft and a few other systems do not always use the Tufts Username and Tufts Password and sometimes must use unique usernames and/or passwords. Others have just not signed up yet for the centrally provided service. You can ask the school or department that provides the legacy service when they will be able to let you use The Tufts Username and Tufts Password.

If you have questions, please contact the 24/7 TTS Service Desk:

Call: 617-627-3376
Email: it@tufts.edu