Using passphrases

Using a passphrase is more secure than using a password, and is your first line of defence against scammers and criminals. A passphrase is a string of random words, which makes it easier to remember than a password of random letters and symbols.

Take a look at the Monash cybersecurity site to find out how to create a strong passphrase.

Password managers

Because it’s hard to remember passphrases and character combinations for every account, it’s good to use a password manager, which will remember them for you.

What to avoid

• Don’t use your username or part of your name in your password.
• Don’t add numbers or symbols to passwords the system has already rejected, such as replacing an s with a $ or an a with an @. (The system will interpret this as the password you’ve already tried and will keep rejecting it.)
• Don’t use the same username and password across different systems (e.g. your Monash account, internet banking platform and gaming network). If one of the systems is compromised, all the other systems that use the same credentials will become vulnerable to attack.

We check all passwords against a database of stolen passwords. If you try to use a password in this database, we’ll reject it.

Keep your password safe

Monash University will never ask you for your password. If you receive an email that appears to be from Monash requesting your password, you should report this email and delete it. For information about reporting suspicious emails, see how to recognise and report phishing.

• Never share your password. You're responsible for keeping your password private. Sharing your password is a breach of the Information Technology Acceptable Use Procedure and can lead to disciplinary action.
• If someone accesses your account using your password, you're responsible for their actions. A malicious user could delete your files, read your private emails, send offensive or abusive emails, send spam or enter into financial transactions on your behalf.

How to change your password

To update your password, use our change password form.