Changes to OpenAthens password policy

 I have had notification of a change to the openathens password policy ie the rules determining what password is acceptable.

Rules:

• New minimum password length of 10 characters for users and administrators.
• The password must meet a minimum complexity score assessed by an industry-standard password strength checker.

When does this happen?

1. Begin July (date unspecified) - rules applied to all new accounts created. If existing accounts are amended, then users will be prompted for password change.
2. 1st September - admin account holders will start to see prompts to change password if it does not comply with the new rules. You can defer but account will be expired if not done within the month.
3. 1st October - user account holders will start to see prompts to change password if it does not comply with the new rules. They can defer but account will be expired within the month.
4. Begin November - accounts where password is not compatible with new rules will be expired.

Please ensure that you update your password if prompted. Remember that emails from OpenAthens can sometimes be re-directed to your spam/junk folder - please check regularly for any valid notifications.

Need help?

Contact your NHS OpenAthens administrator.