NetID Password Management: Everything You Need to Know

Password Complexity Requirements | Password Management | Password Policies

Password Complexity Requirements

1. Passwords must be a minimum of 8 and no more than 40 characters. Passwords with 12 or more characters never expire (learn more).
2. Passwords must contain some combination of at least three of the following:
   1. Punctuation & Symbols (Accepted: `~!@#$^&*()_-={}|[]:;'<>?,)
   2. Numbers
   3. Lowercase letters
   4. Uppercase letters

Password Management (First Time Set Up, Reset, Change, Unlock Account, etc)

1. Browse to http://password.uthsc.edu.
2. This page allows you to:
   1. do a first-time set up
   2. reset your password (personal and departmental NetIDs)
   3. change your password
   4. unlock your account
   5. manage your security questions
   6. manage your two-factor authentication (personal and departmental NetIDs)
3. In the Forgotten & Expired Password section, click reset your NetID password.
4. Enter your NetID and click Continue.
5. Enter one of the following values:
   1. UTHSC Student ID
   2. Employee # (found on your badge)
   3. SSN (Last 4)
6. Enter your birthdate.
7. Authenticate the Duo push to verify your identity. 
8. Review the Tips for Protecting Your UT Accounts, and choose Continue.
9. Type in the new password and verify the new password.
   1. May not contain a significant portion of your username or displayname
   2. May not reuse last 10 passwords
10. Please check the box verifying that you agree to the Acceptable Use Policy.

Password Policies

Standard Password Policy

For NetID accounts with a password of less than 12 characters, the password will expire every 180 days (6 months).

Non-Expiring Password Policy

Once a NetID account is set up to use Duo two-factor authentication AND the password is reset to a 12 or more-character password, the password will NEVER expire as long as Duo is activated on your device.

*If your existing password is 12 or more characters when you set up two-factor authentication, you will need to reset your password one more time to have the non-expiring password policy added to your account.