Governance > Best practices > Creating, managing and changing passwords

1.1 Creating, managing and changing passwords

Preliminary considerations

The following best practices are general recommendations and should be applied in accordance with the configurations and formats required by the Aruba Cloud management panels.

Creating passwords

  • Choose a password that is at least 12 characters long;
  • use a combination of uppercase and lowercase letters, numbers and special characters, even if they are not always required.
  • Avoid using:
    • names, nicknames, dates of birth or other personal information;
    • common words such as "password", "admin", "user", etc.;
    • simple sequences such as "111111", "123456", "abcdef", etc.
  • Do not reuse the same password for multiple accounts: each service should have a unique password.
  • You can use secure password generators, which are also available online for free.

Managing passwords

  • Avoid saving passwords in unprotected files (docx, pdf, txt, etc.).
  • Never send a password together with the username. If necessary, use separate channels (for example, SMS and email).
  • Use a password manager (free or paid) to securely manage your credentials.
  • Always enable two-factor authentication (2FA), if available: it adds an extra layer of protection.
  • Always check that the website where you enter your password is the official one (check the URL).

Changing passwords

  • Change your password immediately if you suspect that it may have been compromised, even if this has not been confirmed.
  • After changing your password, check that you can access the service correctly.
  • Avoid creating variations of the same password (e.g. M4rco#2023, M4rco#2024, M4rco#2025, etc.), as these can be easily predicted by automated attack tools.