Why is my IU passphrase expiring?

Indiana University computing accounts provide access to a wealth of valuable data, much of it sensitive and protected by policy or law, that includes but is not limited to: personally identifiable information, protected health information, and personal and institutional financial data. IU places the utmost importance on the safety and security of its information resources. Each individual who uses a Network ID passphrase helps to reduce the risk to that data, and eliminating insecure passwords and even old passphrases protects people against hacking and misuse of important data.

For these reasons, IU and the University Information Policy and Security Offices (UIPO and UISO) require individuals to maintain Network ID passphrases that are less than two years old.

IT policy has always required users to safeguard information and IT resources by selecting strong passwords or passphrases and updating them regularly. Passphrase expirations clarify that objective and ensure proper compliance. IU will continue to enforce the passphrase age limit as a permanent requirement.

If you have questions about passphrases at IU, contact UISO at  passphrase@iu.edu .

Changing your passphrase

You can change your passphrase at https://passphrase.iu.edu/; see At IU, how do I change my Network ID passphrase? IU recommends that, if your passphrase is close to or over two years old, you change your passphrase as soon as possible, before it expires.

If you have multiple devices that you use to log in with your passphrase, you must ensure that your passphrase is updated on each device. See What precautions should I take when changing my passphrase?

Before your passphrase expires

If your passphrase is approaching expiration, CAS (Central Authentication Service) will begin warning you 14 days in advance of the expiration date, indicating the number of days remaining. Changing your passphrase will reset the two-year clock.

If you see no such message upon a successful CAS login, it's safe to assume your passphrase age is fine.

If your passphrase has already expired

If your passphrase has expired, you must change it as soon as possible, at https://passphrase.iu.edu/.

Note: While the online passphrase change application requires CAS authentication, you will still be able to change your passphrase yourself after it has expired.

Mail will continue to be delivered to your IU email account if your passphrase has expired.