Password Requirements and Common Pitfalls

This article explains Westmoreland’s updated password requirements, including complexity rules, prohibited words, and common mistakes to avoid when creating a new password. It also provides tips for building secure, memorable passphrases that meet all requirements and help prevent password change errors.

Overview

To strengthen account security and comply with industry best practices, Westmoreland has implemented new password requirements. These apply to both Windows and JD Edwards accounts. This guide explains the requirements, common mistakes users make, and tips for creating a strong, memorable password.

 

Password Requirements

Your new password must include:

• At least 1 uppercase letter (A–Z)

• At least 1 lowercase letter (a–z)

• At least 1 number (0–9)

• At least 1 special character (examples: ! @ # $ % ^ & * ( ))

• Minimum length: 15 characters

• Expiration: Change required once a year

 

Restrictions

The following are not allowed:

• Your name or parts of your name (first, last, or username)

• Company name or related words

• Common words like “password,” “welcome,” “qwerty,” etc.

 

Why You May Get an Error When Changing Your Password

The most common reasons users are getting stuck during the password change process:

1. Including part of your own name
   For example: John@2024Secure would fail if your name is John.

2. Not meeting all complexity requirements
   Forgetting to include a special character, number, or uppercase letter.

 

Recommended Approach: Use Passphrases

A passphrase is a series of random but memorable words, or a short sentence combined with numbers and special characters.
Example: Sunrise@TheBeach4Me

Passphrases:

• Are easier to remember than random strings

• Help you meet length and complexity rules

• Avoid common or personal words

 

Tips for Creating a Strong Password

• Think of a sentence you can remember and replace some letters with symbols or numbers.
  Example: "Coffee" → C0ffee
  Example: "Morning" → M0rn!ng

• Avoid birthdays, pet names, or anything that could be guessed from social media.

• Keep it unique to work, don’t reuse passwords from personal accounts.