New Password Requirements
Your new password must meet the following requirements.
Your new password must:
- not match one of your last 24 passwords
- not be similar to a common password
- not match one on a readily available list of compromised passwords
- contain an upper alpha character
- contain a lower alpha character
- contain a numeric character
- contain a special character
- not contain a keyboard pattern like qwerty
- not contain a character pattern like abcde
- not contain a repeating pattern like abcabc
- not contain a repeating character like aaa
- contain at least 9 characters
- contain at least 5 unique characters
You may not have to comply with all these rules if your password contains 15 or more characters.
Reset a Forgotten Password
You can reset a forgotten password in the CIT Password Portal. You must be enrolled in the CIT Password Portal to use this option, otherwise you will need to contact the service desk to help you reset your password.
If you are using a Mac, please follow the guidelines for changing your password with NoMAD.
Visit the CIT Password Portal.
Select Reset.
Enter your username and domain (cit.ucar.edu).
Answer the three security questions you set during the enrollment process.
You will then receive a code in your email. Copy the code from the email and enter it into password portal.
Select Next.
Create a new password following the password requirements.
Change an Existing Password
If you know your current password and want to change it, you can do so in the CIT Password Portal without being enrolled in this system.
If you are using a Mac, please follow the guidelines for changing your password with NoMAD.
Visit the CIT Password Portal.
Select Change.
Enter your username and domain (cit.ucar.edu).
Select Next.
Enter your old password.
Create a new password following the password requirements.
Select Next and complete any remaining prompts to finish changing your password.
Changing Your Mac and CIT Password Using NoMAD
NoMAD is a program that synchronizes your local Mac keychain password with your CIT Domain credentials on a Mac computer. If you have a Mac you should always use NoMAD to update your CIT (Active Directory) credentials, as other password reset methods can create AD/keychain synchronization issues.
NoMAD provides the following functions:
- Monitors the expiration date of your password
- Displays the number of days before expiration in the menu bar. This example: 179d.
- Indicates (using a green check) the presence of a valid Kerberos ticket
- Warns you when the expiration date is approaching (starting 14 days before expiration)
- Allows the user to view and refresh Kerberos tickets (rarely needed)
- Allows the user to change their CIT password from the menu bar; updates the user's login keychain to match the new password.
- Please note that these features will only work while connected to a private NCAR network (StaffNet or VPN)
Before Changing Your Password
Before changing your password verify the following:
You are connected to a StaffNet network, if remote, you must be connected to the GlobalProtect VPN.
NoMAD menu bar icon displays a green check mark.
If not:
- Click the NoMAD menu bar, select Sign In, and then enter your current CIT credentials.
- Click Renew Tickets
If you have forgotten your current password and can't connect to NoMAD, please contact the Enterprise Service Desk.
Changing Your Password
Click the NoMAD menu bar icon.
Click Change Password.
Enter your old password.
Create a new password following the password requirements.
Enter your new password a second time to confirm.
Click Change.
You should see a dialog box that confirms the successful password change.