NetID | Division of Information Technology (2024)

New Members of the University

If you are a new member of the University and you receive the Invalid ID Number error message, you may need to set up Challenge Questions within your SOLAR account. The Password Reset Tool uses your own information as authentication methods and keeping your information updated is best practice.

To set upChallenge Questions, please log into your SOLAR account. Please select Security and Personal Data, then select Challenge Questions Set Up. From here, you will be prompted to create 3 questions that will be used as the Challenge Question authentication method in the Password Reset Tool.

• If you are not prompted to create3 questions, then the system has automatically created3 questions for you using information that's on record for you.

After creating the 3 challenge questions, it's best to review that other information is correct by selecting the Addresses, Email Address, and Phone Numbers options.

Current Members of the University

If you are a current member of the University and you receive the Invalid ID Number error message, there may be an issue with your current status with the University. We recommend that you follow up with the Registrar Office if you are a current student/returning student or your department if you're an employee to confirm your status in PeopleSoft.

For all other issues, it's recommended that you contact the Service Desk at the contact information below.

To change yourPassword Reset Tool Challenge Questions, use the tool's Update Profile section. You'll need

• Your 9-digit Stony Brook ID Number (the numberon your Stony Brook ID card)
• 2 ways to authenticate: With your current NetID and NetID password, by answering questions, with an email address, by SMS (text message), or with DUO.
  You might not see all 5 Authentication Methods.

ChangeYour Challenge Questions

1. In a web browser, go tomypasswords.stonybrook.edu
2. UnderUpdate Profileon the left, clickGo To Update Tool
   
3. In theStony Brook ID Numberbox, enter your 9-digit Stony Brook ID Number (e.g., the number onyour Stony Brook ID card, like 123456789)and clickContinue
   
4. Select 2 of the authentication methods to confirm your Stony Brook ID Number (i.e., to prove it is you andnot someone else trying to change your password)
   Start by checking one box and, if applicable, completing the steps to authenticate for that option.
   Then check a 2nd box and authenticate for that option.
   Start at the top of the list and work down until you've checked/completed 2 options:

   1. Authenticate yourself by using your existing NetID credentials

      1. If you know your current NetID and NetID password, check the box for Authenticate with existing NetID credentials

      2. For Login System Selection, choose NetID

      3. Enter your NetID and current NetID password
         

   2. Authenticate with Challenge Questions

      1. Check the box forAuthenticate with Challenge Questionsand answer the questions
         

   3. Authenticate with SMS (for text messages)

      1. Check the box forAuthenticate with SMS (for text messages)

      2. Select a phone number and from the drop-down which cell phone service provider it uses

      3. ClickSend Pin

      4. Check text messages on that mobile device for the pin and then enter it in the box
         

   4. Authenticate with E-Mail

      1. CheckAuthenticate with E-Mail

      2. Click on an email address to select it
         (if you are setting up your NetID password for the first time, do not select your @stonybrook.edu email address but instead another listed email like @gmail.com, @yahoo.com, etc.)

      3. ClickSend Pin

      4. Check that email account for the email with the pin, then enter the pinin theEnter the pin code sent to your e-mailbox
         

   5. Authenticate with DUO

      1. Select aDUO method (e.g., iOS, Landline) and click a button next to one of the options underthat type, e.g., Send Push, Text Me, Call Me, Passcode
         If you get an error that you must select two authentication methods, before authenticating with DUO, authenticate with one option above first

      2. Complete the DUO authentication on the selected device
         

5. Once you have checked and completed 2 authenticated methodsclick Continue on the right if necessary
   (in some cases, if your 2nd authencation is with DUO for example, the next screen will display automatically)

6. On the Configure/Update Authentication Methodspage that displays on the left, click +Expand To Update Challenge Questions
   

7. Read the the Challege Question/Answer rules, and then for each of the 3 Challenge Questions
   1. Select a questionfrom the drop-down box orenter your own question in the boxbelow
   2. Type the answer and then re-type the answer(answers are not case sensitive)
   3. Once all challenge rules are followedand 3 questions/answers with confirmations are complete, on the bottom right clickFinish.
      
8. When completed, it will return you to the homepage where you can update/reset NetID Password.

Use the new Password Reset Tool tofind your NetID and set or change your NetID or SOLAR Password. You'll need

• Your 9-digit Stony Brook ID Number (the numberon your Stony Brook ID card)
• 2 ways to authenticate: With your current NetID and NetID password, by answering questions, with an email address, by SMS (text message), or with DUO.
  You might not see all 5 Authentication Methods.

Video Demo

1. In a web browser, go tomypasswords.stonybrook.edu
2. UnderPassword Reseton the right, clickGo To Reset Tool
   
3. In theStony Brook ID Numberbox, enter your 9-digit Stony Brook ID Number (e.g., the number onyour Stony Brook ID card, like 123456789)and clickContinue
   
4. Select 2 of the authentication methods to confirm your Stony Brook ID Number (to prove it is you andnot someone else trying to change your password)
   Start by checking one box and completing the steps to authenticate for that option.
   Then check a 2nd box and authenticate for that option.
   Start at the top of the list and work down until you've checked/completed 2 options:

   1. Authenticate yourself by using your existing NetID credentials

      1. If you know your current NetID and NetID password, check the box for Authenticate with existing NetID credentials

      2. For Login System Selection, choose NetID

      3. Enter your NetID and current NetID password
         

   2. Authenticate with Challenge Questions

      1. Check the box forAuthenticate with Challenge Questionsand answer the questions
         

   3. Authenticate with SMS (for text messages)

      1. Check the box forAuthenticate with SMS (for text messages)

      2. Select a phone number and from the drop-down which cell phone service provider it uses

      3. ClickSend Pin

      4. Check text messages on that mobile device for the pin and then enter it in the box
         

   4. Authenticate with E-Mail

      1. CheckAuthenticate with E-Mail

      2. Click on an email address to select it
         (if you are setting up your NetID password for the first time, do not select your @stonybrook.edu email address but instead another listed email like @gmail.com, @yahoo.com, etc.)

      3. ClickSend Pin

      4. Check that email account for the email with the pin, then enter the pinin theEnter the pin code sent to your e-mailbox
         

   5. Authenticate with DUO

      1. Select aDUO method (e.g., iOS, Landline) and click a button next to one of the options underthat type, e.g., Send Push, Text Me, Call Me, Passcode
         If you get an error that you must select two authentication methods, before authenticating with DUO, authenticate with one option above first

      2. Complete the DUO authentication on the selected device
         

5. Once you have checked and completed 2 authenticated methodsclick Continue on the right if necessary
   (in some cases, if your 2nd authencation is with DUO for example, the next screen will display automatically)

6. After you have authenticated, please select the account for the password you are trying to set. If you wish to update both account passwords, you will need to complete the process again and select the other account.

7. The Create a New Password page displays. On the top right underSelected Accounts, the account you selected will be displayed.

8. Under Create a New Password

   1. Read the Password rules

   2. Enter a password
      Tip: Instead of using a password, use a sentence-likepassphrase that's complex but easyto remember FOR YOU likeI ate 2 slices of p1zz4!

   3. Enter the passwordagain in the Confirm Password box
      If you see any red Xsnext to a password rule, you need to change the password by following thatrule.
      

   4. Once all the 4 main rules show green checks next to them, be sure you know and can remember the password you entered and then clickReset
      

   5. You'll see aconfirmation screen indicating whether your password was successfully reset

What is a passphrase?

A passphrase is an easier-to-remember password that is longer and therefore stronger.

Password length most directly influences password strength. So a longer passphrase made of simpler components is more effective than a shorter, super complex password that is difficult to remember.

Using spacesin your passphrase adds complexity while making it easier to remember and can be considered tobe a special character like !@#$%^&*().

Examples:

• Pizza123 - A very weak password
• I ate two slices of pizza - Better
• I ate 2 slices of p1zz4! - Best

Passphrase/Password Complexity

Use passphrases of 16+ characters, and avoid sequential numbers/letters and dictionary words.

Passphrases are easier to remember than traditional passwords or random character strings and longer(therefore less hackable). Many sites/applications allow you to use special characters, punctuation, and even spaces. Switch a few letters for characters and use both upper and lower case for the best passphrase,so you could have a passphrase like this (but don't use this one!):

I ne3d a rea1ly b!g coff3e n0w!

Unique Passphrases

Use a different, unique passphrase for each program/application.By doing this - if one of your passphrasesis compromised, your other accounts will be still secure.

Changing Passphrases

Plan to change your passphrases every 3-6 months.Learn how to change your NetID passphrase.

Managing Passphrases

Overwhelmed by the thought of needing separate passphrasesfor all your accounts AND needing to change them regularly? Consider using a password manager, such as LastPass, which Stony Brook offers free to all students and staff.

Password Privacy

• Do not share your passphrases- this includes sharing passphrases via text message, phone call, email, and online form.
• Try to avoid writing passphrases down - passphrases shouldneverbe stored in a document on your computer; if you must write down a new passphrase, write it down and carry it with you (and be sure to destroy the paper once you've memorized it)

Keep your passphrases private and do not share them. Know that DoIT will NEVER ask for your passphrase through email nor over the phone, and you should never submit your passphrase in a email/web form. Learn more about Phishing Scams.

If you receive an email that is suspicious but inadvertently fill out a form or click on a link, contact Customer Engagement & Support and change your NetID passphraseimmediately.

For information on your accounts when you leave Stony Brook, go to https://it.stonybrook.edu/guides/leaving-stony-brook