At VUMC, high quality care, safety for our patients, and security around information are our top priorities. Even the smallest aspects, like updating your password, can increase security across the Medical Center. There are two critical aspects of security: password hygiene and the prevention of credential stuffing attacks.
Password hygiene refers to the practices and habits that ensure the security and integrity of our passwords. Good password hygiene includes the following:
Use Strong, Unique Passwords:
Passwords should include a mix of upper- and lower-case letters, numbers, and special characters.
Avoid Predictable Passwords:
Steer clear of easily guessable passwords such as “password123” or “football123”. Also, do not use easily obtainable personal information like birthdays or names combined.
Regularly Update Passwords:
Updating your password periodically is a simple and very effective way to mitigate your accounts from becoming compromised.
Credential stuffing is where attackers use automated tools to try large numbers of username and password combinations. Using automated scripts, attackers test these credentials across numerous websites and services, hoping that users have reused passwords. A couple ways to prevent credential stuffing are as followed.
Avoid Repetitive Passwords:
Avoid reusing passwords across multiple accounts. VUMC work accounts should have a distinct password that differs from our personal accounts.
Use a Password Manager:
Password managers can generate and store complex passwords that can be retrieved relatively easy and reduce the burden of remembering multiple passwords.
What should you do if you believe your VUMC account may be at risk?
All workforce members should change their password immediately if they think they are at risk. Click here for step-by-step instructions on how to reset or change a password.
Once the password has been changed, it takes time to propagate to other systems. Please allow at least 15 minutes for this to complete. If you need assistance changing your password, you should contact the VUMC Help Desk at 615-343-4357 for assistance.