New simplified password rules in place for myPay system
Each year, the myPay system is upgraded to meet technical and security requirements, as well as to add new and improved functions for its 6.6 million account holders. The Spring 2014 release, implemented on May 17, delivered password rules more in line with the online banking industry standards, while maintaining DFAS commitment to system and personal security. A number of functional additions and enhancements for military retirees, service members and federal civilian employees have been designed to increase our customers' ability to easily manage their pay.
What changed for retirees on May 17? Simplified passwords: myPay password rules now allow for simpler, more memorable passwords while ensuring passwords remain strong and more secure. While still meeting the intent of DoD cyber security rules, passwords can be shorter and will last longer between changes. Current users who access their account using a login password will be able to create a new password between nine to 30 characters in length. Additionally, the new password will be valid for 150 days. About 10 days before expiration, users will be notified by SMARTDOCS to change their password.
"Balancing security with usability can be challenging with the state of cyber security today," said Dave McDermott, DFAS deputy director for Operations. "This update addresses our customers concerns for creating simpler, more memorable passwords while ensuring passwords remain strong and more secure." Starting May 17, passwords must:
• Be nine to 30 characters in length
• Contain at least one uppercase letter
• Contain at least one lowercase letter
• Contain at least one number (zero to nine)
• Contain at least one of the following special characters: # @ $ ^ ! * + _ %
Passwords will remain valid for 150 days. About 10 days before expiration, users will be notified via SMARTDOCS by email to change their password. The password reset security questions introduced in 2012 will be very important to allow users to reset passwords online and avoid calling the DFAS Care Center for assistance. More information on the myPay Spring 2014 release and the new password requirements are available at the DFAS website http://www.dfas.mil/mypayinfo.html. Before you create your password, check out our Tips and Tricks page at http://www.dfas.mil/mypayinfo/password.html.
As always please see your local County Veterans Service Officer if you have any questions. You can contact your local VSO at (218) 631-7617 or by email at firstname.lastname@example.org and as always have a great week.