Ask L.U.K.E Articles

Password change walkthrough

What is happening?

All Liberty students, alumni, staff and faculty will be prompted to select new security questions and answers and change their current Liberty password. 

Why do I have to change my password and select new security questions and answers?

Changing your Liberty password and security questions will help secure Liberty’s data and your personal information while complying with Liberty’s new password policy and PCI standards.

Also, changing your password to meet the new requirements will lessen the chance of your password being compromised by modern password cracking tools. Studies from Mandylion Research Labs* have shown that a password with 7 characters can be cracked in 102 hours whereas a password with 10 characters takes 2,788 years to crack.

Why does Liberty University have to comply with PCI standards?

The Payment Card Industry (PCI) Data Security Standard (DSS) was created by the PCI Security Standards Council to help thwart the theft of sensitive cardholder information. Any company which stores, processes or transmits payment card data from American Express, Discover, JCB, MasterCard or Visa has to comply with the PCI DSS.

Since Liberty University accepts credit payments it is considered a Credit Card Merchant by the PCI and must comply with the DSS.

How will I change my password?

You will automatically be prompted to change your password upon logging into the Liberty portal. To see how the process will look, check out the Ask L.U.K.E article.

What is the Password Policy?

All Liberty University systems will be accessed via a user account that is protected by a password that meets commonly accepted strength checks to improve protection against hacking attempts, and ensure compliance with Payment Card Industry (credit card merchant) regulations.

Student & Alumni Requirements

  • Passwords must be a minimum of eight (8) characters in length.
  • They must contain at least 3 of the following character sets:
    • Upper case alphabetic (A-Z)
    • Lower case alphabetic (a-z)
    • Numerals (0-9)
    • Special characters (+ / ! # ^ : . , ~ -)
  • The alphabetic portion must not be a single common dictionary word. For example, ‘Liberty1’ is prohibited. Multi-word phrases such as, ‘2BigBoxes’ are allowed.
  • These special characters are prohibited: (% _ $ & ; ( ) [ ] { } " ' ` * ? @)
  • Students must change their passwords yearly.
  • Passwords cannot include any part of your username, first name, or last name.
  • New password must be different from last 10 used passwords
  • Accounts will automatically be locked for 30 minutes after 5 failed password attempts

Faculty & Staff Requirements

  • Passwords must be a minimum of ten (10) characters in length.
  • They must contain at least 3 of the following character sets:
    • Upper case alphabetic (A-Z)
    • Lower case alphabetic (a-z)
    • Numerals (0-9)
    • Special characters (+ / ! # ^ : . , ~ -)
  • The alphabetic portion must not be a single common dictionary word. For example, ‘Liberty1’ is prohibited. Multi-word phrases such as, ‘2BigBoxes’ are allowed.
  • These special characters are prohibited: (% _ $ & ; ( ) [ ] { } " ' ` * ? @)
  • Faculty & staff must change their passwords every 90 days.
  • Password cannot include any part of your username, first name, or last name.
  • New password must be different from last 10 used passwords
  • Accounts will automatically be locked for 30 minutes after 5 failed password attempts.

*Liberty does not endorse any products offered by Mandylion