McGill is currently investigating unusual network activity. As a precautionary measure, we are requiring all system users to reset their McGill passwords. You have until March 28, 10:30 a.m. EDT to make this change. If not done by this time, your McGill password will be replaced by a random password. Users who have not made the change in time will need to consult www.mcgill.ca/password to receive instructions on how to reset their McGill password. For resource or affiliate account sponsors, you can change the password via Reggie. For these accounts, passwords will not be reset on March 28; targeted communications will be sent in upcoming weeks for the accounts with unchanged passwords. If the account is no longer required, you may ask for it to be disabled by contacting the IT Service Desk.
As part of the University’s ongoing information-security program, McGill is constantly monitoring network activities. Any activity that is considered unusual is identified and investigated. The system-wide password reset is a best practice, standard protocol designed to ensure the integrity of IT systems following the detection of unusual activity. While at this time, we do not have evidence that any personal information has been compromised, should we discover that personal information was accessed inappropriately, we will advise the individuals concerned. If you require instructions for resetting your McGill password, please visit www.mcgill.ca/password
Thank you for your cooperation.
FREQUENTLY ASKED QUESTIONS
1. How do I reset my password?
If you require instructions for resetting your McGill password, please visit www.mcgill.ca/password
2. What are the best practices for defining a password?
Password Best Practices
- Keep your passwords private: Do not share your password with anyone, including system administrators and technicians, who should never request it.
- Keep personal details out of passwords – Refrain from using sensitive information in your passwords, such as your birth date, SIN number, first and/or last name or phone number. Do not use your username as your password.
- Make them strong: McGill passwords must be between 8 to 18 characters in length. Passwords containing a combination of uppercase and lowercase letters, numbers, symbols, and punctuation marks are generally the strongest. Avoid the use of adjacent keyboard combinations, such as “ASDFGH”, “qwerty” or “12345678”.
- Do not use the same password for all accounts:
Your McGill Username and McGill Password provide you with access to many services at McGill. Make sure you do not use your McGill Password to access your personal accounts, such as banking, personal email, and social media.
For more information on creating strong passwords, refer to the following:
3. I can't log into Minerva to change my McGill password Not all users can use Minerva to change a McGill password. If you are trying to change the McGill password of a resource account or you are an affiliate, you must use Reggie instead.
4. I have reset my password, but I am still having problems accessing myCourses, Webfolders, OWA, etc.
If you have configured McGill services, such as email, wireless, and webfolders (WebDAV), on your computer, laptop or mobile device, or have saved your McGill credentials in your browser for use in logging into myCourses, OWA, etc., you will have to change the password, or in some cases, delete and recreate the connection, to avoid being locked out of McGill systems by the old password.
The Password Reset Checklist will guide you through the process.
5. I have reset my password, and followed the instructions in the Password Reset Checklist, but I am still having issues
If you continue to have issues after consulting the Password Reset Checklist, please submit a request to the IT Service Desk or call (514) 398-3398, and someone will assist you.
Telephone support hours are:
Monday – Thursday 8 a.m. - 6:30 p.m.
Friday 8 a.m. – 5 p.m.
Please note that call wait times may be longer than usual. We appreciate your patience.
6. I’m sponsor or I use a resource account or an affiliate account, can I change its password?
If you are the sponsor of a resource or an affiliate account, you can use Reggie to make a password change (see above) and communicate that new password to anyone else using it. However, please note these passwords will not be automatically changed on March 28, but at a later date. Targeted communications will be sent to the sponsors of accounts with unchanged passwords with specific considerations regarding different account usage use cases. If you are aware of an account that is no longer required, we can disable it for you.
If you are using a resource or an affiliate accounts and wish to change your password at this time, please coordinate with your account’s sponsor and anyone else using the resource account.
7. Has personal information been accessed inappropriately?
At this time, we do not have evidence that suggests any personal information has been inappropriately accessed. The university is continuing its investigation, and if we learn that personal information has been accessed inappropriately , we will notify each user directly.
Please note that if your personal information is modified in Banner, you will receive a notice by email.
8. What unusual activity did the University detect?
As part of the University’s ongoing information security program, McGill is constantly monitoring network activities. McGill detected unusual network activity by a remote user who gained unauthorized access to the McGill network.
Should you have any other questions, please call McGill at the following number:
514-398-3398
