Protect Your Email Password When Using Web-based Email Programs

By Dan Albrich (dalbrich@oregon.uoregon.edu)

While it may be obvious that you should not give your computing account password to a friend, you may not know that it's an even worse idea to give that password to an off-campus email service.

Passwords have become increasingly vulnerable, largely due to external web-based email programs like Hotmail, Yahoo, Campusi, etc.

These systems in and of themselves don't necessarily represent a major problem, but most of them have a "convenience feature" that does. This feature allows you to access your UO email from one of these external web-based mail systems. If you choose to do this, you're asked to enter your UO username and password into the external mail system, thereby exposing yourself to risk.

While you may not realize it, you're extremely vulnerable when you allow your confidential information to be stored on non-UO systems and transmitted through non-UO networks. Here are just a couple of the reasons why:

• Because your UO password is stored on another system, it may be compromised at some point down the road. This has the potential to reveal one--or possibly many--UO passwords to computer criminals.
• While you may not fear for your own account information, a computer criminal can use your information as a means to exploit other accounts or UO systems.

There are alternative ways of accessing your UO email conveniently without jeopardizing your UO accounts. For example, you can choose to avoid these external web-based systems altogether and use the UO's WebMail system (https://webmail.uoregon.edu). Or, you can forward your mail from our system to any email address without revealing your passwords.

Another important precaution is to keep your UO password confidential. Giving out UO passwords is expressly forbidden by our acceptable use policy. Please don't give out any UO password!

Finally, when you use an external mail system, make sure it offers adequate technical support. If you experience problems and are unable to contact the provider, you may not have any other support option. For further information or assistance with email security, please contact Microcomputer Services in Room 202 Computing Center. The office is open 9am to 5pm Monday through Friday, and you can reach consultants by emailing microhelp@oregon.uoregon.edu or calling 346-4412.