Mainframe - 3270 Password Rules
This document lists the rules/requirements for 3270 passwords.
The rules, summarized below, follow standard practices implemented at many universities for safeguarding access to information.
Passwords must be a minimum of six (6) characters long.
The maximum number of characters will remain at eight (8).
The password must contain at least three (3) of the following four (4) categories:
- upper case letters
- lower case letters
- numbers, and,
- special characters @ # $ * & : = - ! % ? _ |
Please note: The password may not include your userID (i.e., 3-character logon). Neither the = character nor the ? character can be first in the password.
Passwords must be kept for seven (7) days.
Passwords must be changed at least every 90 days. Typically, there is a seven (7) day expiration notice.
The system will remember your previous passwords and will prohibit changing a password to any string that you have used in the past four (4) password changes.
The login will be suspended after three (3) unsuccessful login attempts in a single 3270 session or six (6) consecutive, unsuccessful logon attempts over multiple 3270 sessions.
- Please note that passwords must be changed in TPX (F2), not Admin (F6).