Updated ISP-178 Password Policy
Updated ISP-178 Password Policy
Download this as a .PDF file
What’s Changing?
• Password length: Minimum 15 characters
• Passphrases encouraged: Longer, more memorable, more secure
• Expiration extended: Now 365 days (formerly 90 days)
• Support for legacy systems: Exceptions allowed where technically required
Why This Matters
• Improves resilience against password-based cyberattacks
• Reduces Helpdesk volume and user frustration
• Aligns with modern cybersecurity best practices
What You Need To Do
• Prepare a memorable 15-character or longer passphrase
• Update your password when prompted during rollout
• Contact the Helpdesk if you need assistance
Quick Facts
• 15-character passphrases are exponentially harder to attack
• Yearly password updates reduce predictable patterns
• Stronger security with less hassle for staff
October 16, 2026