MSU Denver will soon update its password security requirements, introducing changes designed to strengthen digital safety while easing the burden of password management.
Beginning Oct. 30, the minimum password length for new or changed passwords will increase from 12 to 15 characters. Current passwords that do not meet the new standard will remain valid for now but will require updating as new passwords are established. Enforcement will be phased in across the University at the end of the year to minimize disruptions, with batches of users receiving notice of password reset requirements.
In the coming months, the University will also roll out a new password filter. The tool is designed to block passwords that are weak, compromised, or too similar to those previously used. The filter is expected to be in place within three to four months.
The changes stem from MSU Denver’s annual systems audit, which reviews compliance, security, and alignment with industry standards. The audit identified an opportunity to strengthen password policies. Instead of requiring frequent mandatory resets — such as every 90 days — the University is implementing the filter to reduce security risks while maintaining user convenience.
“Our goal is to keep MSU Denver’s systems secure without adding unnecessary burden for students, faculty and staff,” said Richard Belisle, IT Information Security manager. “These changes strike that balance by replacing outdated reset rules with smarter, more effective safeguards.”
All MSU Denver single sign-on services, including Office 365, Canvas, and Workday, will be affected by these updates.
For questions or concerns, employees and students are encouraged to contact the ITS Service Desk at 303-352-7548 or visit support.msudenver.edu.
