To strengthen account security and protect university resources, Vanderbilt University has updated its password requirements. These standards apply both when setting your password during the initial account claim process and when prompted to change your password annually. This revised standard will take effect Oct. 27, 2025.
What’s changing:
- Passwords must now be minimum of 12 characters (we recommend not going above 16 characters) and using a passphrase for stronger security and easier recall
- Passwords may not contain three or more consecutive characters from your VUNetID, first name, middle name or last name.
Tip: A strong passphrase could be a memorable sentence or combination of unrelated words, such as PurpleGuitars!7!
Please visit our Secure Password Guide for more guidance. If you need help creating or updating your password, contact the VUIT Help Desk at 615-343-9999 or through our online request form.
Password Requirements
Your password must:
- Not include your VUNetID, first name, middle name or last name
- Not contain three or more consecutive characters from your VUNetID, first name, middle name or last name
- Not be the same as any of your past 10 passwords
- Be a minimum of 12 characters (we recommend not going above 16 characters) and use a passphrase for stronger security and easier recall.
In addition, your password must meet at least three of these four conditions:
- Include at least one lowercase letter
- Include at least one uppercase letter
- Include at least one number
- Include at least one special character: ! @ # $ % ^ & * +
Thank you for doing your part to keep Vanderbilt’s digital environment secure.
