IT Service Alert: 15-character password policy
Service impacted:
Ecology login passwords for single sign-on and Microsoft services. (The password you use when you log into your work computer.)
What is happening?
A policy change affecting NEW passwords only to align Ecology with state security policy.
Who or What will this impact?
All Ecology staff and contractors.
What does this mean to you?
- NEW! Passwords of 15-characters only expire every 365 days.
- Your old password will still expire within 120 days of when you created it.
When that happens, the policy will require:
Your new password must be fifteen (15) characters long and meet the previous criteria from POL16-02AttachmentA.pdf:
- b) Passwords must contain at least one special character (such as &, =, or an extended ASCII set character) and two of the following three types of characters: upper-case, lowercase, numeric.
- c) Passwords may not contain three or more consecutive characters from the user’s logon ID or full name.
- d) Passwords must not consist of a single complete dictionary word but may include a passphrase.
- e) Passwords must be significantly different from the previous four passwords.
Why is this happening?
State security policy requires that all agencies implement these longer password requirements. Passwords are required but they are not the only way to log in or authenticate. Check out some piloting or approved alternative login methods: Password updates and optional Yubikeys.
Start date/time:
Wednesday, November 19, 2025, 6 p.m.
Planned End date/time:
This policy change is permanent.
Questions?
BTSC Help Desk ECYREISHELPDESK@ECY.WA.GOV

