October is Cyber Security Awareness Month. Over the next few weeks, we’ll focus on the skills and simple actions that can help keep our University community secure. This week, we're covering passwords and multi-factor authentication (MFA).

Password is your first line of defence against unauthorised access
Attacks happen every day trying to gain access to accounts by guessing passwords. Your student account gives access to a range of important services including your emails, Blackboard, My Student Record, Engage and more.
That makes it valuable and a target by a range of attacks. Keeping the account secure begins with a strong password.
Use these following tips to set up a strong password:
- Use a long password with 14 characters
- Avoid using predictable passwords like name, date of birth, course...
- It should be unique
- Do not share it with anyone
- Never re-use an old password
Add an extra security layer with multi-factor authentication (MFA)
MFA adds an extra security layer for your account. MFA means using more than one way to prove your identity. It’s recommended to set up the Microsoft authenticator app to protect your account.
The Microsoft authenticator app generates a temporary code which means that even if the attacker knows the password, they will not be able to access the account without the code.
Protect your account with MFA:
- Set up the Microsoft Authenticator app. Download it on your phone as soon as possible. It's your most important security tool.
- Never share codes generated by the app. Temporary codes are for your eyes only.
- Protect your phone. Use a PIN, fingerprint, or Face ID. Your phone is your second factor - guard it.
- Never use another person's phone or Authenticator. Your MFA must be tied to your device only - no exceptions.
Remember: real service desk/IT colleagues will never ask for your password or MFA code by email, phone, or Teams. If they do it's a scam.
Haven't set up MFA yet? Do it now. It takes less than 5 minutes and dramatically reduces your risk of being compromised.
This week's challenge
Take the 'Password and MFA Knowledge check' via this online form now.
Working Safely Online
Are you looking for more advice on protecting your data and staying secure at Westminster?
Our Working Safely Online guidance provides information about passwords, safe networks, backing up your work and other ways to stay secure online.

