NHSmail: Changes to password policy

NHSmail: Changes to password policy

May 31, 2019

NHS Digital is introducing an improved NHSmail password policy, which will include less frequent password changes. NHSmail users’ passwords will become valid for 365 days instead of the current 90-day expiry. This change follows PSNC, on behalf of the Community Pharmacy IT Group (CP ITG), lobbying NHS Digital about its approach to frequent forced password changes for national systems including NHSmail.

PSNC asked NHS Digital to consider applying the National Cyber Security Centre’s (NCSC) guidance that states: “Regular password changing harms rather than improves security, so avoid placing this burden on users”.

NHSmail users will be notified they must change their password within 45 days of the new policy’s introduction. The new policy also adopts some of the NCSC’s other password guidelines; new NHSmail passwords must follow criteria including:

  • A minimum length of 10 characters without requiring a mix of character types.
  • Not matching your previous four passwords.
  • Not detected as a common password, e.g. password1234.
  • Not detected as a breached password (a password used for an account that has previously been compromised).

Top tip: NCSC recommend that a strong and memorable password is created by choosing three random words, e.g. ‘planeyellowbread’.

PSNC, working with the CP ITG, maintains a list of commonly requested NHSmail features. If you have a suggestion then please email PSNC’s Community Pharmacy IT Lead.
Read more at: PSNC’s NHSmail webpage and at the NHSmail webpage about the change to password policy.

More Latest News >

Vacancies at CPH

We currently have two vacancies at CPH (both positions are temporary until March 2021). Please click here for full details....

Espranor packaging changing

From June 2020 Ethypharm will be changing Espranor packaging for both the 2mg and 8mg dose strengths from a pack...

Easter Opening Hours

Whilst we understand the rationale behind the decision to direct pharmacies to open, the LPC is very disappointed with the...