NHSmail: Changes to password policy

NHSmail: Changes to password policy

May 31, 2019

NHS Digital is introducing an improved NHSmail password policy, which will include less frequent password changes. NHSmail users’ passwords will become valid for 365 days instead of the current 90-day expiry. This change follows PSNC, on behalf of the Community Pharmacy IT Group (CP ITG), lobbying NHS Digital about its approach to frequent forced password changes for national systems including NHSmail.

PSNC asked NHS Digital to consider applying the National Cyber Security Centre’s (NCSC) guidance that states: “Regular password changing harms rather than improves security, so avoid placing this burden on users”.

NHSmail users will be notified they must change their password within 45 days of the new policy’s introduction. The new policy also adopts some of the NCSC’s other password guidelines; new NHSmail passwords must follow criteria including:

  • A minimum length of 10 characters without requiring a mix of character types.
  • Not matching your previous four passwords.
  • Not detected as a common password, e.g. password1234.
  • Not detected as a breached password (a password used for an account that has previously been compromised).

Top tip: NCSC recommend that a strong and memorable password is created by choosing three random words, e.g. ‘planeyellowbread’.

PSNC, working with the CP ITG, maintains a list of commonly requested NHSmail features. If you have a suggestion then please email PSNC’s Community Pharmacy IT Lead.
Read more at: PSNC’s NHSmail webpage and at the NHSmail webpage about the change to password policy.




More Latest News >

NHSmail: Changes to password policy

NHS Digital is introducing an improved NHSmail password policy, which will include less frequent password changes. NHSmail users’ passwords will...

CPPE: Emergency contraception workshops

The Centre for Pharmacy Postgraduate Education (CPPE) is offering two-hour workshops on pharmacy emergency contraception services over the next few months....

NPA Bursary applications

Pharmacists can now apply for the National Pharmacy Association’s (NPA) £10,000 Health Education Foundation bursary. The annual bursary aims to...