What precautions should I take when changing my passphrase?
Important: If you have not changed your passphrase in two years, IU requires that you do so. If you do not, your passphrase will expire and you will be unable to log into most IU services. See Why is my IU passphrase expiring?
Your Network ID username and passphrase are used by many services throughout Indiana University: wireless networks, email accounts, ADS logins, and others. You might also access these services through multiple computers, smartphones, or tablets.
With the growing number of devices and services that use your Network ID credentials for authentication, you should take precautions when you change your passphrase. Devices or services for which you have saved your old passphrase might attempt to authenticate, and thereby lock you out of your account. Use the following guidelines to make your passphrase change as smooth as possible:
Before you change your passphrase
Note: If you have a laptop that's joined to the ADS domain (so you use your Network ID to log into the computer itself), it's easiest to change your passphrase while you're on campus. If you need to change your passphrase while you're off campus, for Windows computers, it may be easier to make a VPN connection before changing your passphrase.
- Close your email clients (e.g., Outlook, Mail).
- Close your UniCom/Lync client, and unplug your UniCom/Lync USB
- Close any Outlook connections on your mobile device.
- Log out of any programs on your computer, log out of any
authenticated IU services (e.g., Oncourse, OneStart), and close any
open files or folders on the network.
- On your mobile device, disconnect from IU Secure or any other IU wireless SSID. If your device has an airplane mode, turning that on will prevent it from reconnecting.
Changing your passphrase
After you have changed your passphrase
Note: When you change your Network ID passphrase, it may take up to 20 minutes for all systems to recognize the new passphrase. UITS recommends waiting 20 minutes before logging into IU systems, such as IU Webmail, Account Management Service, and OneStart.
- On your mobile device, update the saved passphrase for your
email account and reauthenticate to IU Secure. Some devices may
allow you to update these while in airplane mode. If so, update, and
then turn off airplane mode. Otherwise, update shortly after turning
airplane mode off. Test your email and web browsing.
- If your computer is connected to IU Secure, disconnect from the
network and reconnect to IU Secure. Reauthenticate with your new
passphrase (if you are not prompted for new credentials, you may
have to change them manually, through the Control Panel or System
Preferences). Test your connection in your web browser.
- For computers joined to the ADS domain, the credentials you use to
log into the computer itself will usually be cached. See below for
specific situations. (If your computer isn't joined to the ADS domain,
the following is irrelevant.)
- For Windows computers, if you're on campus or connected from off campus using VPN, it's not necessary to completely log out or reboot in order for your new passphrase to take effect. After waiting approximately 20 minutes, you may simply lock your workstation, and use your new passphrase to unlock it. This should ensure uninterrupted access to services like Outlook, Lync, file servers, and more. If your new passphrase does not work yet on the lock screen, use your old passphrase and try again later.
- For Macs, if you're on campus, log out of the computer and log in again with your new passphrase.
- For Macs off campus, you may need to use your old passphrase to log into your computer until you bring it back to campus, when the new passphrase should work. Note that you will still use the new passphrase to authenticate to IU services.
- Open your email client, and log in with your new passphrase. If
your client does not prompt you for your passphrase, you may have to
change it through the Control Panel or System Preferences.
- Open your UniCom/Lync client and reconnect your UniCom/Lync USB
phone; if necessary, change your passphrase in your client account
- Change your passphrase in any other applications in which you
have stored it, either within the applications themselves or through
the Control Panel or System Preferences.
- In Windows 7, check that the Credential Manager hasn't stored
old credentials in the Windows Vault. To do so, from the Control
Credential Manager. Click the names of any credentials linked to your old passphrase, and then remove them from the vault (click
Remove from vault).
- Log back into any other IU services.
If you miss one of your stored passphrases on a device or service, you might be locked out of your account; see At IU, why is my ADS domain account locked? If you are locked out of your account, your campus Support Center will be able to assist you; see How do I contact the Support Center at each IU campus for help?
Last modified on August 22, 2012.