...

Self-service password reset is enabled for all staff and student NIDA accounts. This allows you to reset your own password without IT intervention, provided you set up at least two alternate authentication methods to validate your identity.

...

• At least two alternate forms of authentication (i.e. other than your password) must be set up in order to be able to perform your own password reset. Once you have set up at least two forms of alternate authentication, you will be able to perform your own password reset.

• You must have access to at least two of your nominated methods in order to reset your password.

...

Your options for alternate authentication are:

1. Authenticator App – You have two options for this method:

   1. Microsoft Authenticator App – This is an official Microsoft app and is the most secure method of authentication.
      This app will be able to pop up during logins and you can simply unlock your phone and “Approve” sign-in requests.
      This app requires an internet connection on your mobile device, however it is also able to provide a standard 6-digit code even when you are offline.
      This can be install from the iOS App Store or Google Play Store. Search for “Microsoft Authenticator”.
      Microsoft will provide a QR code to scan. On the App, simply select “Add School or Work account” and then “Scan QR Code” and scan the code provided.

   2. I want to use a different authenticator app – This option allows you to use any standard TOTP based authenticator app of your choice.
      You will need to manually open your authenticator app in order to retrieve a 6 digit code.
      No internet connection is required for this app to work, however, the time on your mobile device needs to be accurate to within 30 seconds.
      Microsoft will provide a QR code to scan. On your app, add a new account using the QR code provided.

2. Phone/Alternative Phone - You have two options for this method
   Simply select “Australia (+61)” and then enter your mobile/phone number into the field to the right.
   Then select which option you prefer and click Next.

   1. Text me a code – Microsoft will SMS you a 6 digit code

   2. Call me – Microsoft will make a call to your number and

...

1. 1. you simply need to dial # (hash/pound) to approve the request

2. Email – Microsoft will send an email to the email address you specify.
   This may contain a code or a link to click on. You must use an email address that is not provided by NIDA.
   Simply enter an email, retrieve the code that Microsoft sends to the provided email and type it into the setup prompt.

3. Security Questions – Provide answers to some pre-defined questions.
   Password resets require at least 3 security questions to be answered correctly in order to count as one form of authentication. Choose questions and answers that are not easily guessed and not widely known by other people.

Performing Password Resets

You can perform your password reset by using one of the following official Microsoft links:

• aka.ms/sspr

• https://passwordreset.microsoftonline.com/

Password Requirements

Your new password must meet the following criteria:

• Must be at least 12 characters in length

• Must NOT be a previously used password

• Must NOT contain your name or username

• Must contain at least 3 of the following character classes:

  • Upper case letter

  • Lower case letter

  • Number

  • Symbol/Special Character