Password FAQ
Your NetID and password give you access to a variety of computing services on Duke networks. For more information about password security, read Duke's IT Security Office guidelines.
- How do I change my NetID password?
- What is Challenge & Response Verification?
- How do I create my Challenge & Response questions?
- What are guidelines for selecting a good password?
How do I change my NetID password?
If you know your existing password and wish to change it, you can use the OIT account self-service tool.
If you do not know your existing password, you can:
-
Call the OIT Service Desk at (919) 684-2200 or the DHTS Help Desk at (919) 684-2243. For security reasons, we cannot reset a password via e-mail or live chat.
-
Visit the OIT Service Desk at the Link, Perkins Library, Lower Level.
-
Fax a NetID Password Reset Form with a copy of a photo ID (passport, drivers license, or Duke card) to (919) 684-4400.
Duke's Challenge/Response Verification (CRV) system uses questions and answers to help identify you to the Service Desk without the need to provide your Social Security Number. To set up those challenge questions, please visit the OIT account self-service tool. Once the questions are established, you can use the self-service password reset application to change your password in the future.
What is Challenge & Response Verification?
The Challenge-Response Verification system (CRV) is designed to allow users to prove their identity over the phone to the Service Desk or to electronic systems when they have forgotten their NetID password. Users choose questions to which only they would know the answer. The system allows a user to securely prove his or her identity without having to provide a Social Security number.
Here's how it works:
-
Users must choose or create at least three questions, but can choose more.
-
These questions may last indefinitely, but users are encouraged to change them once they have been used.
-
When trying to change your password over the phone, you will be asked three of your questions and must answer all of them correctly.
-
For security purposes, when anyone views your questions, you will receive an e-mail notifying you that someone accessed your questions.
-
When someone attempts to answer your questions, a second e-mail will be sent to you stating which questions were asked and which were answered correctly.
How do I create my Challenge & Response questions?
After your NetID has been activated, you can log in to the OIT account self-service tool using your NetID and NetID password. You can select or create three questions and provide a response to each. You will receive weekly e-mail reminders to create the questions until you have done so.
What are guidelines for selecting a good password?
When you select a password, follow these guidelines:
-
The more characters, the better (as long as you can remember them). Your NetID password must be at least 8 characters long.
-
Make your password easy for you to remember but hard for someone else to guess.
-
Intersperse punctuation marks or symbols such as #, $, %, etc. Do not use a blank space.
-
Always use a mixture of upper- and lower-case characters.
For a more thorough discussion of passwords, including strategies for password selection, visit Duke's IT Security Web site.