Upcoming changes to the NetID activation and reset process

On Thursday, November 18, the Yale Information Security Office (ISO) will  release an updated version of the NetID Management Tool.

Members of the Yale community will notice several changes to the NetID activation and password reset processes:

• Instead of asking for security questions, the activation process will now collect and verify a non-Yale email address.
• When an individual forgets their password, they will reset it by responding to an email sent to their recovery email address.
• Security questions will be permanently retired.

The NetID management application will also introduce a new feature. Members of the Yale community can perform a personalized checkup of their account security. This is part of ISO’s ongoing campaign to help every member of the community contribute to Yale’s overall cybersecurity.

The security checkup feature will launch with three important checks:

• Check that a current password meets the new complexity standards.
  • These standards were updated in the summer of 2020. Once a password meets modern complexity standards, annual password changes will no longer be required.
• Verify that a non-Yale recovery email is on file.
  • Non-Yale email addresses that are currently on file may need to be updated. This check ensures that ISO has the correct email address in case a reset is required.
• View whether your email security is up to date.
  • Yale email accounts are required to use modern authentication. There are several thousand accounts still using legacy authentication methods which will require an update. This check will inform users of their current status and walk them through updating to use Modern Email Authentication.

The ITS Help Desk will be updating their identity verification process, replacing the less secure practice of using security questions. The Help Desk will only be able to accept two methods of proving identity if further assistance is required.

• The person can use DUO, either by acknowledging a push notification or providing a passcode to validate identity.
• The person can show a government-issued photo ID or Yale ID card via video call or in person.

View the NetID Management Tool User Guide.

Thank you for your support of this important initiative.