Password Reset | Academic IT Security (2024)

Use a set of words rather than a single word. Start by picking two or three words.

A good passphrase –

• Should be 12 characters or more, the longer the better.
• Should include a combination of mixed case letters, numbers, and special characters.
• Should not be reused with any other account.
• Should not include any of the user’s personal information like their address or phone number.
• Should not include any information that can be accessed on social media like kids’ or pets’ names.
• Should not contain any consecutive letters or numbers.
• Should not be the word “password” or the same letter or number repeated.

The words should not normally be associated together. “March madness”, “four scores”, “yellow submarine”, or “I love you” wouldNOTbe good choices since they would likely be included in a list of passwords an attacker would try.

Once you have a few words, add special characters or numbers at the start, end or in between the words to satisfy the complexity rule.

Choosing a good passphrase can make a difference, listed below are some example of passphrases and the time it would take to crack it. Please don’t reuse any of these examples as actual passphrases on your accounts.

• pizza6Handle – estimated time to crack this password is 2000 years
• 3purplePANDAS – 100,000 years
• 9-upper-VOLUME – 2,000,000 years
• Boy,skateboard4 – 33,000,000,000 years

In comparison, it would take about 12 hours to crack any random complex eight character password.

Use the Password Reset guides below for help changing your password

Use the Azure Password Reset guides below for help setting up and using the self service password reset tool

Use the guide above for help Choosing a Secure Password/Passphrase

The steps required to reset your password will vary depending on your use case. Please read and follow the instructions for the appropriate scenario. Resetting your password while onsite is both the easiest and fastest way to complete this process.

Scenario 1: MSHS-Workstation (Sign-In)

• Log in to the desktop or laptop using your network account.
• Press Ctrl + Alt + Delete on your keyboard, then click on Change a Password

• Enter your old password, then enter your new password twice.
• Press Ctrl + Alt + Delete on your keyboard, then click on Lock.

• Unlock the computer using your new password.
• Your password will now be updated and synced.

Scenario 2: MSHS Workstation (Kiosk or WOW)

Kiosks and WOWs do not allow you to sign in with your own username and password. Use the following instructions to reset your password when using these workstations.

• First Time Only: Register your account in Azure Password Reset using the instructions at the end of this guide.
• Click on the Password Reset icon in your Desktop Application Launcher or visit https://passwordreset.microsoftonline.com in
  a browser (Edge or Chrome):

• Enter your Mount Sinai (@mountsinai.org) or Icahn School of Medicine (@mssm.edu) email address.
  • Note that if you don’t have an email address but have a user ID you should log in as:
    • userid@mountsinai.org
    • userid@mssm.edu
• Enter the Captcha Code, then click Next.

• Select I forgot my password and click Next. Then select Answer My Security Questions as the Recovery Method. Answer your security questions and click Next.

• On the next page, enter your new password twice. Then click Finish.

• You have successfully changed your password! You may be prompted to enter your new password on devices where you’ve signed in such as computers or mobile devices.

Scenario 3: Personal Computer and/or Mac

• First Time Only: Register your account in Azure Password Reset using the instructions at the end of this guide.
• Visit https://passwordreset.microsoftonline.com in a browser.
• Enter your Mount Sinai (@mountsinai.org) or Icahn School of Medicine (@mssm.edu) email address.
  • Note that if you don’t have an email address but have a user ID you should log in as:
    • userid@mountsinai.org
    • userid@mssm.edu
• Enter the Captcha Code, then click Next.

• Select I forgot my password and click Next. Then select Answer My Security Questions as the Recovery Method. Answer your security questions and click Next.

• On the next page, enter your new password twice. Then click Finish.

• You have successfully changed your password! You may be prompted to enter your new password on devices where you’ve signed in such as computers or mobile devices.

Scenario 1: MSHS/ISMMS-issued Windows laptop

• Log in to the laptop using your network account.
• Connect to Tunnel via the VPN website appropriate for your account:
  • Hospital Employees: https://msvpn.mountsinai.org
  • School Employees: https://msvpn.mssm.edu
  • Vendors: https://msvpn-vendor.mountsinai.org

• • • or using the BIG-IP Edge Client on your Desktop Application Launcher.

• Confirm that you are connected to Tunnel:

• Press Ctrl + Alt + Delete on your keyboard, then click on Change a Password.

• Enter your old password, then enter your new password twice.
• Press Ctrl + Alt + Delete on your keyboard, then click on Lock.

• Unlock your laptop with the new password.
• Your password will now be updated and synced.

Scenario 2: Personal Computer and/or Mac

Option 1: Use Azure Password Reset

• First Time Only: Register your account in Azure Password Reset using the instructions at the end of this guide.
• Click on the Password Reset icon in your Desktop Application Launcher or visit https://passwordreset.microsoftonline.com in
  a browser (Edge or Chrome):
• Enter your Mount Sinai (@mountsinai.org) or Icahn School of Medicine (@mssm.edu) email address.
  • Note that if you don’t have an email address but have a user ID you should log in as:
    • userid@mountsinai.org
    • userid@mssm.edu
• Enter the Captcha Code, then click Next.

• Select I forgot my password and click Next. Then select Answer My Security Questions as the Recovery Method. Answer your security questions and click Next.

• On the next page, enter your new password twice. Then click Finish.

• You have successfully changed your password! You may be prompted to enter your new password on devices where you’ve signed in such as computers or mobile devices.

Option 2: Resetting Via VPN Website:

• Visit the appropriate VPN page for your account:
  • Hospital Employees: https://msvpn.mountsinai.org
  • School Employees: https://msvpn.mssm.edu
  • Vendors: https://msvpn-vendor.mountsinai.org
• Enter your username, password, and check the box to change your password.

• Enter your new password twice, then click Continue.

• Your password will now be updated and synced.

Whenever your password is updated, you will be required to update any mobile device (phone or tablet) where you receive MSHS/ISMMS emails.

Updating Apple iPhones/iPads:

• You should receive an automatic prompt to re-enter your password but can also enter it manually in Settings.

• Scroll down to Mail, then Accounts, then Mount Sinai Email – O365.

• If password re-entry is necessary, you will see a prompt to Re-enter password. Click on that prompt and then enter your email address and password on the next page.

• Enter your Symantec VIP Access code (if prompted) and click Continue.

• Your device will return to the Settings menu and syncing will now resume.

Updating Android Devices:

Instructions not yet available. Please contact the Help Desk for additional assistance.

Mount Sinai Health System: 212-241-4357

Icahn School of Medicine at Mount Sinai: 212-241-7091

• Go to https://aka.ms/ssprsetup

• Log in with your Mount Sinai (@mountsinai.org) or Icahn School of Medicine(@mssm.edu) email address.
  • Note that if you don’t have an email address but have a user ID you should log in as:
    • userid@mountsinai.org
    • userid@mssm.edu

• Once signed in, you’ll be redirected to Microsoft’s Security info page. Click on Add Method and select Security Questions.

• Select and answer 5 security questions, then click Done. Your security questions are now registered.

• You can now change your password and unlock your account online! Please visit https://passwordreset.microsoftonline.com to do so.

• Go to https://passwordreset.microsoftonline.com.
• Enter your Mount Sinai (@mountsinai.org) or Icahn School of Medicine (@mssm.edu) email address.
  • a. Note that if you don’t have an email address but have a user ID you should log in as:
    • userid@mountsinai.org
    • userid@mssm.edu
• Enter your Captcha Code, then click Next.

• Select I know my password but still can’t sign in and click Next.

• Then select Answer My Security Questions as the Recovery Method. Answer your security questions on the next page, then click Next.

• Your account has been successfully unlocked!

Contact the Helpdesk

The Mount Sinai Hospital and Mount Sinai Queens:212-241-4357
The Icahn School of Medicine at Mount Sinai:212-241-7091
Mount Sinai Beth Israel, Mount Sinai Brooklyn, Mount Sinai St. Luke’s and Mount Sinai West:212-523-6486