Why did my password get scrambled?

Why passwords get scrambled

Technology Solutions Security & Privacy resets passwords whenever they detect account behavior that fits a pattern of abuse. Whenever such logins are observed, precautions must be taken against attackers logging into your account and using it for malicious purposes. Compromised accounts are identified by spam actively being sent from the account, or a report that the account's credentials were included on a password list being used by cybercriminals online. In many cases, the suspicious activity consists of observed logins that are too far apart geographically and too close together in time to be explained by travel.

Some behaviors can make your legitimate logins look suspicious enough to be caught by this system. These primarily consist of:

• Sharing your password with someone else (friends, family members, etc.). This is a violation of the Campus Appropriate Use Policy.
• Intermittently using a third-party VPN. VPNs change where your internet traffic appears to be coming from, so if you are in one country and connect to a VPN from another country, your apparent location will suddenly change. If you need to use a third-party VPN, you should connect it before accessing any University resources, and make sure to leave it connected.

NOTE: Technology Solutions do not support third-party VPNs, and for most situations, a better solution would be to use the CISCO AnyConnect client VPN, which is free from the WebStore. The UIC Virtual Private Network (VPN) solution offers a secure connection to university networks, enabling access to resources that are restricted to on-campus use.

Instructions for installation and use of the VPN client can be found at:

1. Windows: https://help.uillinois.edu/TDClient/37/uic/KB/ArticleDet?ID=973
2. MacOS: https://help.uillinois.edu/TDClient/37/uic/KB/ArticleDet?ID=904
3. Linux: https://help.uillinois.edu/TDClient/37/uic/KB/ArticleDet?ID=910

The compromised account system is programmed to recognize UIC VPN logins and will not consider them suspicious.

Please contact Technology Solutions via go.uic.edu/Ask-an-IT-Question for support

• Using a third-party service or mail provider that logs into your email account on your behalf. There are some Outlook plug-ins, some mailbox management services, and some phone apps that exhibit this behavior, and will always appear to be a suspicious login. These services should not be used with University email accounts.
• Using an out-of-country cell phone on roaming. If a cell phone is on a local WiFi network the internet traffic will appear normal, but if the phone is on roaming, many cell phone companies route internet traffic back to the home country of the cell phone, making it appear to be located there. You may not be able to use this cell phone reliably in this way without having your password reset.

How to regain access to your account

To regain access to your account you may do so with the Technology Solutions Password Manager, accessible at https://identity.uillinois.edu/, or from the "Reset Your Password" button on the main Technology Solutions website. This requires you to have your account recovery options configured beforehand. If you are not able to do this, please contact the Technology Solutions Help Desk at UIC Help Center Home (uillinois.edu) If you are faculty or staff, it may be more convenient to contact your unit IT department for assistance.