Carnegie Mellon University Website Home Page
 

Password Requirements

If you work with one of the enterprise applications, your application password is subject to certain strength requirements. See the appropriate application below for details.

HRIS, SIS, PAS

  • Human Resources Information System (HRIS)
  • Student Information System (SIS)
  • Property Accounting Services (PAS)

The following strength requirements apply to your password:

Must Contain
  • At least 8-characters.
  • At least one uppercase alphabetic character (e.g., A-Z).
  • At least one lowercase alphabetic character (e.g., a-z).
  • At least one number (e.g., 0-9).
  • At least one special character (e.g., ~!@#$%^&*()_-+=).
Cannot Contain
  • Known information (i.e., first and last name, Andrew userID, preferred email address).

Additional Policies

  • Expires within 90 days.
  • Last five passwords cannot be used.
  • Cannot be changed more than once per day.

Oracle Financials

Must Contain
  • At least 8-characters.
  • At least one alphabetic character (e.g., a-z).
  • At least one number (e.g., 0-9).
Cannot Contain
  • Your Andrew userID
  • Repeating characters, such as tt or 99.

Additional Policies

  • Expires within 90 days.
  • Cannot use the same password twice.