November 2006 Newsletter

Wanted: Fresh Passwords

By: Webmaster

The ASP Portal will soon expect you to change your password periodically. In an effort to help our clients adjust to this change, here are some answers to frequently asked questions, as well as a few additional tips.

Why do we have to keep changing our passwords?

Basically, this security policy limits risks. If someone got your password, innocently or maliciously, they have less time to abuse data belonging to you and your patients. It also helps enforce another security policy: not sharing passwords. And it limits the amount of time a hacker has to guess your password. For these reasons and more, HIPAA makes password management a law [§164.308(a)(5)(ii)(D)].

How do I change my ASP Portal password?

After logging into the ASP Portal, look to the “Customize” box near the top right of the page. Click the “Change password” link, then follow the instructions on the next page.

If I forget to change it in time, can I still get to my data?

Yes. When you log in after your password has expired, you’ll be forced, through a detour, to select a new password before you can do other work in the ASP Portal.

What if I forget my password?

No problem. Just request a reminder: Click on the blue help button to get to a bigger login page.

Enter your ASP Portal login name, then click the “Forgot my password” button. Make sure to use the right login name for the ASP Portal; if you’re not sure, try the “E-mail my login name” link to the right.

More tips:

• When picking new passwords, remember good ones are “easy to remember, hard to guess.”
• Ask your employer’s technical support staff about using password management software, so you can handle multiple passwords while only having to remember one.
• Avoid changing your password before a vacation or weekend, so you don’t forget it while you’re away.
• “Use it or lose it”: If you don’t manually entering your passwords on a regular basis, you will forget them.