Setting a secure password

Follow these practices to protect your password. If someone else gets a hold of your password or credentials, you have no control over the information and processes that they can access with your details.

Have longer passwords

We recommend using as many characters as the service allows.

Be unique

Each password, from your UniKey to your personal email, should be different from one another. This ensures that if one password is compromised, your other accounts aren't vulnerable.

Protect your passwords

Record them only in a private place. Consider a password manager app, such as KeePass, LastPass, 1Password and Dashlane.

Have strong security questions

Many sites allow you to reset your password if you correctly answer security questions about yourself. Since this information is readily available online, we recommend avoiding easy questions.

Enable two-factor authentication 

This option requires you to authenticate with both a password and another ‘factor’ (typically your phone).

Protecting your UniKey

Your UniKey is your ‘digital key’ to a wide range of University online services and resources. Before providing these credentials to any app, make sure that the app is safe and legitimate.

Check that it's an official and/or safe app

Ensure that the app is created or endorsed by the University. If not, you would be putting your information at risk of being stolen or misused.

University login pages are branded with the University crest and often include links to relevant University webpages. 

Check the website URL

Before entering your UniKey and password on a website, check that the URL is ‘sydney.edu.au’ or ‘usyd.edu.au’.

Attackers sometimes try to hide or impersonate a website by using hyphens ‘ – ‘ or groups of words that seem appropriate, for example: sydney.edu.au.notavirus.org or sydney-edu-au.freewebsite.com.

Doubts or questions?

If you're not sure about a website or app that’s asking for your UniKey details, contact the ICT Service Desk.

Protecting sensitive data

During your time here at the University, you may come across information of a confidential or sensitive nature through your study or research.

Some examples are personal identity documents like your passport and driver's licence, health and financial information, visa details, academic records and your student ID.

It’s important that you handle this information carefully at all stages so your data remains protected.

Creating or receiving sensitive data

Be sure you only share data with those who require or are authorised to access it. Always store this data in a secure location, such as an encrypted physical drive or on your University network drive.

Sharing and accessing data

Always have the appropriate protection for your devices and storage. Laptops, tablets, phones, even USB sticks/thumb drives should be encrypted.

Browsing securely

Your online presence generates lots of data that can be harvested and misused. There are some simple ways to protect your information.

• Limit the amount of personal details you disclose online.
• Check your privacy settings on your social accounts.
• Ensure you’re secure by checking the site is 'https'.
• When using public wireless networks, avoid logging into financial accounts.
• Always use secure payments, such as PayPal, Apple Pay and credit card. Never send your bank or credit card details via email.
• Create a strong password. Think of a passphrase instead by using more than 12 characters comprising 4 words.
• Always lock your devices by using a combination of pin numbers, passphrases, fingerprint scans or facial recognition software.

Remember, it’s quick to click but safer to open a browser and go directly to the actual website.