Imagine spending years on a research project only to have the data compromised and the results brought into question. Unfortunately, this is what happened to Katherine, a renowned researcher in a highly specialized and innovative field. Excited about some of her recent and very telling findings, Katherine shared her Access Account user ID and password with an equally respected colleague and friend at another institution. She was eager for feedback and lively dialogue on the subject. Her colleague, without malice, posted this information on a public blog she maintains in order to facilitate discussion. But rather than promote lively discussion, it exposed the data to people who should not have seen it and brought the results—and her hard-earned reputation as a researcher—into question. Needless to say, Katherine's department head was not pleased. "The preceding story illustrates how important it is for University researchers and faculty members to be aware of the significant dangers in revealing their Penn State Access Account passwords—and underscores that they should never share them with anyone no matter what kind of situation comes up," explained Kathy Kimball, director of Security Operation Services at Penn State. "It's essential today for Penn State community members to think more consciously about using their Penn State Access Account responsibly in all of their electronic interactions."
To learn more about effective digital identity practices, see the following:
The above story illustrates real-life digital identity situations that have occurred at Penn State or other universities around the country. Names have been changed to protect the privacy of the individuals involved.
Don't write down or store your password on paper or on a computer system where others might acquire it. Learn more.
Need help thinking of a new strong password? Read password best practices for tips.