{"id":260,"date":"2017-11-14T10:49:20","date_gmt":"2017-11-14T10:49:20","guid":{"rendered":"https:\/\/blog.bham.ac.uk\/itsecurity\/?p=260"},"modified":"2017-11-14T10:49:20","modified_gmt":"2017-11-14T10:49:20","slug":"student-password-change-notices","status":"publish","type":"post","link":"https:\/\/blog.bham.ac.uk\/itsecurity\/2017\/11\/14\/student-password-change-notices\/","title":{"rendered":"Student Password Change Notices"},"content":{"rendered":"<p>We have had a lot of queries recently about password change reminders and whether or not they are a phishing attack.\u00a0 We have previously published an <a href=\"https:\/\/blog.bham.ac.uk\/itsecurity\/2017\/01\/30\/genuine-password-change-notice\/\">example password change notice<\/a> highlighting its characteristics and how it differs from an attack.<\/p>\n<p>Some students have been asking why there has been a change in policy.\u00a0 The policy itself has not changed, but it is now being enforced.\u00a0 It has been a long established University policy that everyone must change their password at least every 180 days.\u00a0 \u00a0This has been enforced for staff accounts for a few years.\u00a0 Earlier this year, enforced password changes were implemented for student accounts.<\/p>\n<p>There have also been questions about why we force password changes.\u00a0 \u00a0An article discussing the reasons for the policy is <a href=\"https:\/\/blog.bham.ac.uk\/itsecurity\/2017\/03\/14\/password-policy\/\">available here<\/a>.<\/p>\n<p>There is also an <a href=\"https:\/\/blog.bham.ac.uk\/itsecurity\/2016\/12\/22\/malicious-emails-and-how-to-spot-them\/\">article about how to spot phishing and other scams<\/a> and how they tend to differ from genuine notifications.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>We have had a lot of queries recently about password change reminders and whether or not they are a phishing attack.\u00a0 We have previously published an example password change notice highlighting its characteristics and how it differs from an attack. Some students have been asking why there has been a change in policy.\u00a0 The policy &hellip; <a href=\"https:\/\/blog.bham.ac.uk\/itsecurity\/2017\/11\/14\/student-password-change-notices\/\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Student Password Change Notices&#8221;<\/span><\/a><\/p>\n","protected":false},"author":84,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-260","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/blog.bham.ac.uk\/itsecurity\/wp-json\/wp\/v2\/posts\/260","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.bham.ac.uk\/itsecurity\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.bham.ac.uk\/itsecurity\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.bham.ac.uk\/itsecurity\/wp-json\/wp\/v2\/users\/84"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.bham.ac.uk\/itsecurity\/wp-json\/wp\/v2\/comments?post=260"}],"version-history":[{"count":2,"href":"https:\/\/blog.bham.ac.uk\/itsecurity\/wp-json\/wp\/v2\/posts\/260\/revisions"}],"predecessor-version":[{"id":262,"href":"https:\/\/blog.bham.ac.uk\/itsecurity\/wp-json\/wp\/v2\/posts\/260\/revisions\/262"}],"wp:attachment":[{"href":"https:\/\/blog.bham.ac.uk\/itsecurity\/wp-json\/wp\/v2\/media?parent=260"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.bham.ac.uk\/itsecurity\/wp-json\/wp\/v2\/categories?post=260"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.bham.ac.uk\/itsecurity\/wp-json\/wp\/v2\/tags?post=260"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}