Forgot your BlazerID password? You don’t have to contact AskIT.

Did you know there is a quick and easy way to reset it through BlazerID Central?

If you have a phone number registered for B-Alert/e-Notify, you can use the automated password reset. Just register a new or existing phone number for “Identity” in the e-Notify signup here. You’ll get a text or voice message with a code to reset your password.

And if your password has expired, you can still log in to BlazerID Central with your old password to reset to a new password.

UAB’s password/passphrase policy, effective Jan. 1, 2014, requires faculty and staff to change their passwords every 90 days, and students to change their passwords every 180 days.

UAB IT has changed its notification schedule for changing your BlazerID password. Users now receive notices 15 days before their passwords expire, as well as seven days, three days, two days and one day prior to expiration.

Remember: E-mailed password change notices from UAB IT will NOT include clickable links, due to ongoing phishing attempts. All updates to your BlazerID password should be managed through BlazerID Central.

A strong password, changed at regular intervals, is one of the best ways to safeguard your information – and everyone else’s.

That’s why UAB requires employees to change their BlazerID passwords every 90 days, and students every 180 days.

Changing passwords often – and making sure they are both strong and secure – will help keep hackers out of your data and out of UAB’s systems.

Beginning Aug. 1, UAB IT will send the first reminder that you need to change your BlazerID password 15 days before the expiration date, a change from the previous 30-day advance notice. Reminders are also e-mailed one week before expiration, as well as sent at three days, two days and one day prior to expiration.

Password expiration notices tell you the exact date your password will expire so you can keep track of when you need to change it.

Remember: E-mailed password change notices from UAB IT will NOT include clickable links, due to ongoing phishing attempts. All updates to your BlazerID password should be managed through BlazerID Central.
Effective January 1, 2014, UAB has a new password/passphrase standard for all active Blazer ID users. This standard supports the Data Protection and Security Policy and is designed to improve the overall security posture on campus. This standard applies to all users and systems at UAB which utilize a BlazerID.

The basics of this standard include:

  • minimum/maximum length requirements for BlazerID passwords/passphrases
  • password/passphrase expiration intervals
  • restrictions on reusing the same password/passphrase for the six previous intervals
  • password/passphrase complexity requirements
  • system logging of failed attempts to log on
  • disabling of unused accounts after a specific interval of non-use
  • requirements for credential encryption while in transit
  • several other recommendations

An official copy of this standard can be found in the UAB Policies and Procedures Library and on the UAB IT Information Security website in the IT Related Policies and Guidelines page.

Questions on this standard and its implementation should be directed to AskIT at (205) 996-5555 or to the Enterprise Information Security line (205) 975-0842 or to datasecurity@uab.edu.



UAB Information Security recently discovered a new spam campaign where users are tricked into opening an email attachment that contains a virus aimed at stealing passwords and financial information.  As with any suspicious email messages you may receive, please report them to askit@uab.edu for inspection.

The recent spam email messages are crafted to look like they came from one of several legitimate companies such as Chase Bank, the Better Business Bureau (BBB), Department of Treasury, Dun & Bradstreet Financial Services or a wire transfer company. You should be aware that these emails are forged and that none of the information included in the email can be trusted including embedded links, e-mail addresses or phone numbers.

Here are some of the common email subject lines we have seen in this spam campaign:

•  FW: Company 2013 Report

•  Incoming Wire Transfer Notification

•  D&B iUpdate: Company Order Requested

•  Department of Treasury Notice of Outstanding Obligation – Case ######

•  Better Business Bureau Complaint Case #######

•  Merchant Billing Statement

•  ACTION REQUIRED: A document has arrived for your review/approval (Document Flow Manager)

If you have definitely forgotten your Blazerid password, click here.

If you think you remember your BlazerID password but it is not letting you log in, then click here.

















Published in FAQ - Infrastructure

Because your BlazerID password is used to open the door to many services and features on the UAB network, it is vital that it be strong enough to resist guessing by casual means. Someone breaking into your UAB records can be the first step toward identity theft which is being well-publicized now. To be sure you have a strong password, make sure it follows these rules:

  • Must be at least eight (8), no more than sixteen (16) characters in length
  • Must be a mix of letters, numbers, and optionally punctuation characters [except equal sign (=) comma (,) or quotation marks (') or (") or spaces/blanks]
  • Should not include any part of your own name, or the names of any family members, pets, or friends
  • Should not include your BlazerID, or any personal identification number, phone number, or your birth date
  • Should not be a single word, in any common language
The BlazerID registration and password screens try to ensure these rules are followed to the best extent possible. Note that strong passwords do not have to be difficult to remember; combining a couple of familiar words and either replacing one letter with a number, or separating the words with a number or acceptable punctuation, is a common way of creating a password that is both easy to recall by you and hard to guess by others.

Published in FAQ - Infrastructure

The first step in keeping your password secure is to create a good one. After you've created a strong password, continue with the suggestions below to keep it safe:

  • Never share your password with anyone.

    This includes family, friends, significant others, computer support people, and bosses. If you need someone to read your email, you can have that person do so without using your password by using the delegates feature in MS Outlook.

  • Never save your password when prompted by your web browser or any other programs.

    You can turn this option off in Internet Explorer (Tools -> Internet Options -> Content -> AutoComplete) & Mozilla (Tools -> Options -> Security).

  • Change your password regularly.

    To change your BlazerID's password, click here.

  • Make your password easy to remember, but hard to guess.

    Use a lyric to a favorite song, for example:

    "How much is that doggie in the window":

    hmitditw

    For more security, add a capital letter & convert an 'i' to a '1':

    hM1tditw

  • Never send your password via email - even if the request looks official.

    Any request to send your password via email is most likely a phishing attempt.

Published in FAQ - Infrastructure