Setting up your IT account

Reset your password via the Self Service Password Reset (SSPR). This is intended for staff and student use. Please note you must have completed your Account Setup in order to use this reset process.

To reset your password visit: https://aka.ms/sspr/?whr=southwales.ac.uk

When using University systems and devices, you are responsible for everything that happens while you are logged on. That means you should not leave a PC logged in while leaving the desk. It also means you have to choose secure passwords and change them regularly. Here’s some good advice on the Dos and Don’ts of password selection.

Dos

• It is recommended that you use mnemonic phrases to help you remember your password. For example, “My mother’s maiden name is Zebedee she is 91” produces “MmmniZsi91” (Please Note: This valid example should not be used, it is just for reference.)
• Use of at least two numbers in a password is recommended
• When you change your password it is recognised that this may be done in a hurry and lead to you choosing insecure passwords. It is suggested that using a mnemonic phrase with numbers enables you to alter one element e.g. the number, keeping the remainder of the password intact and making it simpler to remember. You should note that this method is slightly less secure than choosing a completely different mnemonic phrase.

Don’ts

• Don’t use words from a dictionary
• Don’t use permutations of dictionary words and numbers
• Don’t use names associated with your circumstances
• Don’t ever write down your password
• Don’t pick well-known phrases for your mnemonic

Multi-Factor Authentication (MFA) strengthens login security by requiring a
second piece of information beyond your password. This is usually a temporary
code sent to your device, which is then entered when you log in to confirm the
person signing in is you.

Most online bank, email and social media accounts now offer Multi-Factor
Authorisation as added protection for your accounts and data security.
The set-up procedure includes adding two of the following: your mobile number,
personal email address or completing a set of security questions.

• Setting up Multi-Factor Authentication (MFA)
• Update your Multi-Factor Authentication.

Setup can be completed on any device but our recommended method for MFA is
the Microsoft Authentication App or Google Authenticator App, which can be found in your mobile app store.

Update your Multi-Factor Authentication (MFA)

You can update your MFA options at any time. You will need to do this if you change your mobile phone, we strongly advise the Microsoft Authenticator. It provides added security.

Adding the Microsoft Authenticator Application on your Phone

Before disposing of your old phone, you will need to use it to authenticate access to your Microsoft security page.

To update your MFA settings, visit: Microsoft security page (https://mysignins.microsoft.com/).

There will be no charge for receiving text codes or if you are using the App connected to WIFI, however, the App may use a small amount of your mobile data if you are not connected to WIFI.  If you want to avoid this please ensure your App setting is altered not to allow use of mobile data or when you are prompted to authenticate on your computer – select choose another option and select receive text message or enter verification code from the App.  

Watch the video: Update your Multi-Factor Authentication (MFA)

Before disposing of your old phone, you will need to use it to authenticate access to your Microsoft security page.

Along with other universities, we have noticed an increased threat from phishing attempts and cyber-attacks. The introduction of MFA is part of an initiative to counter these issues and to help you protect access to your accounts and data.

Yes, we advise you to change your MFA set up and receive your code via the Microsoft Authenticator app, at least for the time period you're away.

Yes. Follow our recommended MFA set up and use the Microsoft Authenticator app. Instead of selecting 'use verification code', choose 'receive notifications for verification'. That way all you have to do is tap 'approve' when the verification request comes through to your app, rather than type across a code.