This audit will impact:
As we find any weak passwords, the system will then require you to change your password.
Q1. Does this mean that we have to move to longer passwords?
A1. Not necessarily – we aren’t checking the length of the password. We are checking whether your password has been leaked or breached in other systems. For example, if your password was used on a different website that was compromised, then we will force you to change to a new password.
Q2. What is the definition of a weak vs a strong password?
It is NOT about length, special characters, etc. Instead, it’s about whether your password is a known or commonly used password that has already been involved in a security breach.
Q3. If I’m forced to change my password – will I be able to just go back in and change it back to what I previously had?
A3. No, the system will stop you from doing that.
Q4. I have a staff laptop – If I change my password, is there anything that needs to be updated on my staff laptop?
A4. Yes, there are several areas of your laptop that would need to be updated, please visit: https://sites.google.com/a/wdmcs.org/wdmcstechhub/systems/change-my-staff-member-password
Q5. If a student is forced to change their password, will they be required to be at school to change their password?
A5. Students will be able to change their password using their Chromebook from either home or school.
Q6. Our school has some generic accounts that are used by subs or used for other purposes, can we be exempt from changing that password?
A6. No. If the password for any generic account is found to be weak – the system will force that password to be changed.
Q7. Will I get a heads up or a personal notification that I’ll need to change my password?
A7. No. This message is your heads up. As the audit determines you have a weak password, it will force you to change and you will not get personalized message, it will just force you to change.
Q8. Should I go ahead and change my password on my own prior to the audit?
A8. No – because you could be forced to change it again during the audit. We recommend just waiting to see if your password makes it through the audit.