UAB is revising its password/passphrase policy to ensure better security for campus assets.

Under the new policy that is being phased in beginning Sept. 15, passwords/passphrases will need to be 15 characters, but the passwords will expire after one year.

Implementation of the policy will be phased in; while users can change their passwords at any time at BlazerID Central, they will NOT be required to change their passwords to 15 characters until their current password expires. Enforcement of the new requirements and expiration will begin on the first password change event after the policy goes into effect on Sept. 15.

Fifteen-character passwords are much harder to crack than eight-character passwords, making them more secure than UAB’s current standard. Once a password/passphrase expires, a user will never be able to reuse it. 

A strong passphrase:

  • Is a series of words that create a phrase.
  • Does not contain common phrases found in literature or music. You can choose a sentence or phrase that is familiar to you, but use the first letter of every word as a mnemonic device.
  • Does not contain words found in the dictionary. You can replace certain letters in words with numbers, such as 1 for an I or L.
  • Does not contain your user name, real name or company name.

UAB’s passphrases must contain three of the following four characters: an uppercase letter, a lowercase letter, a number and a special symbol.

When users log into BlazerID Central to change their passwords, they will automatically be prompted to enroll a phone number in the Identity feature, which allows users to more easily reset a BlazerID password/passphrase without having to contact AskIT.

UAB IT is also actively pursuing a contract for a password manager for faculty, staff and students. 



Forgot your BlazerID password? You don’t have to contact AskIT.

Did you know there is a quick and easy way to reset it through BlazerID Central?

If you have a phone number registered for B-Alert/e-Notify, you can use the automated password reset. Just register a new or existing phone number for “Identity” in the e-Notify signup here. You’ll get a text or voice message with a code to reset your password.

And if your password has expired, you can still log in to BlazerID Central with your old password to reset to a new password.

UAB’s password/passphrase policy, effective Jan. 1, 2014, requires faculty and staff to change their passwords every 90 days, and students to change their passwords every 180 days.

UAB IT has changed its notification schedule for changing your BlazerID password. Users now receive notices 15 days before their passwords expire, as well as seven days, three days, two days and one day prior to expiration.

Remember: E-mailed password change notices from UAB IT will NOT include clickable links, due to ongoing phishing attempts. All updates to your BlazerID password should be managed through BlazerID Central.

A strong password, changed at regular intervals, is one of the best ways to safeguard your information – and everyone else’s.

That’s why UAB requires employees to change their BlazerID passwords every 90 days, and students every 180 days.

Changing passwords often – and making sure they are both strong and secure – will help keep hackers out of your data and out of UAB’s systems.

Beginning Aug. 1, UAB IT will send the first reminder that you need to change your BlazerID password 15 days before the expiration date, a change from the previous 30-day advance notice. Reminders are also e-mailed one week before expiration, as well as sent at three days, two days and one day prior to expiration.

Password expiration notices tell you the exact date your password will expire so you can keep track of when you need to change it.

Remember: E-mailed password change notices from UAB IT will NOT include clickable links, due to ongoing phishing attempts. All updates to your BlazerID password should be managed through BlazerID Central.