New Members of the University

If you are a new member of the University and you receive the Invalid ID Number error message, you may need to set up Challenge Questions within your SOLAR account. The Password Reset Tool uses your own information as authentication methods and keeping your information updated is best practice.

To set up Challenge Questions, please log into your SOLAR account. Please select Security and Personal Data, then select Challenge Questions Set Up. From here, you will be prompted to create 3 questions that will be used as the Challenge Question authentication method in the Password Reset Tool. 

• If you are not prompted to create 3 questions, then the system has automatically created 3 questions for you using information that's on record for you.

After creating the 3 challenge questions, it's best to review that other information is correct by selecting the Addresses, Email Address, and Phone Numbers options.

Current Members of the University

If you are a current member of the University and you receive the Invalid ID Number error message, there may be an issue with your current status with the University. We recommend that you follow up with the Registrar Office if you are a current student/returning student or your department if you're an employee to confirm your status in PeopleSoft.

For all other issues, it's recommended that you contact the Service Desk at the contact information below.

To change your Password Reset Tool Challenge Questions, use the tool's Update Profile section. You'll need

• Your 9-digit Stony Brook ID Number (the number on your Stony Brook ID card) 
• 2 ways to authenticate: With your current NetID and NetID password, by answering questions, with an email address, by SMS (text message), or with DUO.
  You might not see all 5 Authentication Methods.

Change Your Challenge Questions

1. In a web browser, go to mypasswords.stonybrook.edu
2. Under Update Profile on the left, click Go To Update Tool
   
3. In the Stony Brook ID Number box, enter your 9-digit Stony Brook ID Number (e.g., the number on your Stony Brook ID card, like 123456789) and click Continue
   
4. Select 2 of the authentication methods to confirm your Stony Brook ID Number (i.e., to prove it is you and not someone else trying to change your password)
   Start by checking one box and, if applicable, completing the steps to authenticate for that option.
   Then check a 2nd box and authenticate for that option.
   Start at the top of the list and work down until you've checked/completed 2 options:

   1. Authenticate yourself by using your existing NetID credentials

      1. If you know your current NetID and NetID password, check the box for Authenticate with existing NetID credentials 

      2. For Login System Selection, choose NetID

      3. Enter your NetID and current NetID password
         

   2.  Authenticate with Challenge Questions

      1. Check the box for Authenticate with Challenge Questions and answer the questions
         

   3. Authenticate with SMS (for text messages)

      1. Check the box for Authenticate with SMS (for text messages)

      2. Select a phone number and from the drop-down which cell phone service provider it uses

      3. Click Send Pin

      4. Check text messages on that mobile device for the pin and then enter it in the box
         

   4. Authenticate with E-Mail

      1. Check Authenticate with E-Mail

      2. Click on an email address to select it
         (if you are setting up your NetID password for the first time, do not select your @stonybrook.edu email address but instead another listed email like @gmail.com, @yahoo.com, etc.)

      3. Click Send Pin

      4. Check that email account for the email with the pin, then enter the pin in the Enter the pin code sent to your e-mail box
         

   5. Authenticate with DUO

      1. Select a DUO method (e.g., iOS, Landline) and click a button next to one of the options under that type, e.g., Send Push, Text Me, Call Me, Passcode
         If you get an error that you must select two authentication methods, before authenticating with DUO, authenticate with one option above first

      2. Complete the DUO authentication on the selected device
         

5. Once you have checked and completed 2 authenticated methods click Continue on the right if necessary
   (in some cases, if your 2nd authencation is with DUO for example, the next screen will display automatically)

6. On the Configure/Update Authentication Methods page that displays on the left, click + Expand To Update Challenge Questions
   

7. Read the the Challege Question/Answer rules, and then for each of the 3 Challenge Questions
   1. Select a question from the drop-down box or enter your own question in the box below
   2. Type the answer and then re-type the answer (answers are not case sensitive)
   3. Once all challenge rules are followed and 3 questions/answers with confirmations are complete, on the bottom right click Finish.
      
8. When completed, it will return you to the home page where you can update/reset NetID Password.

Use the new Password Reset Tool to find your NetID and set or change your NetID or SOLAR Password. You'll need

• Your 9-digit Stony Brook ID Number (the number on your Stony Brook ID card) 
• 2 ways to authenticate: With your current NetID and NetID password, by answering questions, with an email address, by SMS (text message), or with DUO.
  You might not see all 5 Authentication Methods.

Video Demo

1. In a web browser, go to mypasswords.stonybrook.edu
2. Under Password Reset on the right, click Go To Reset Tool
   
3. In the Stony Brook ID Number box, enter your 9-digit Stony Brook ID Number (e.g., the number on your Stony Brook ID card, like 123456789) and click Continue
   
4. Select 2 of the authentication methods to confirm your Stony Brook ID Number (to prove it is you and not someone else trying to change your password)
   Start by checking one box and completing the steps to authenticate for that option.
   Then check a 2nd box and authenticate for that option.
   Start at the top of the list and work down until you've checked/completed 2 options:

   1. Authenticate yourself by using your existing NetID credentials

      1. If you know your current NetID and NetID password, check the box for Authenticate with existing NetID credentials 

      2. For Login System Selection, choose NetID

      3. Enter your NetID and current NetID password
         

   2.  Authenticate with Challenge Questions

      1. Check the box for Authenticate with Challenge Questions and answer the questions
         

   3. Authenticate with SMS (for text messages)

      1. Check the box for Authenticate with SMS (for text messages)

      2. Select a phone number and from the drop-down which cell phone service provider it uses

      3. Click Send Pin

      4. Check text messages on that mobile device for the pin and then enter it in the box
         

   4. Authenticate with E-Mail

      1. Check Authenticate with E-Mail

      2. Click on an email address to select it
         (if you are setting up your NetID password for the first time, do not select your @stonybrook.edu email address but instead another listed email like @gmail.com, @yahoo.com, etc.)

      3. Click Send Pin

      4. Check that email account for the email with the pin, then enter the pin in the Enter the pin code sent to your e-mail box
         

   5. Authenticate with DUO

      1. Select a DUO method (e.g., iOS, Landline) and click a button next to one of the options under that type, e.g., Send Push, Text Me, Call Me, Passcode
         If you get an error that you must select two authentication methods, before authenticating with DUO, authenticate with one option above first

      2. Complete the DUO authentication on the selected device
         

5. Once you have checked and completed 2 authenticated methods click Continue on the right if necessary
   (in some cases, if your 2nd authencation is with DUO for example, the next screen will display automatically)

6. After you have authenticated, please select the account for the password you are trying to set. If you wish to update both account passwords, you will need to complete the process again and select the other account.

7. The Create a New Password page displays. On the top right under Selected Accounts, the account you selected will be displayed.

8. Under Create a New Password

   1. Read the Password rules

   2. Enter a password
      Tip: Instead of using a password, use a sentence-like passphrase that's complex but easy to remember FOR YOU like I ate 2 slices of p1zz4! 

   3. Enter the password again in the Confirm Password box
      If you see any red Xs next to a password rule, you need to change the password by following that rule.
      

   4. Once all the 4 main rules show green checks next to them, be sure you know and can remember the password you entered and then click Reset 
      

   5. You'll see a confirmation screen indicating whether your password was successfully reset

What is a passphrase? 

A passphrase is an easier-to-remember password that is longer and therefore stronger. 

Password length most directly influences password strength.  So a longer passphrase made of simpler components is more effective than a shorter, super complex password that is difficult to remember.  

Using spaces in your passphrase adds complexity while making it easier to remember and can be considered to be a special character like !@#$%^&*().

Examples:

• Pizza123 - A very weak password
• I ate two slices of pizza - Better
• I ate 2 slices of p1zz4! - Best

Passphrase/Password Complexity

Use passphrases of 16+ characters, and avoid sequential numbers/letters and dictionary words.

Passphrases are easier to remember than traditional passwords or random character strings and longer (therefore less hackable). Many sites/applications allow you to use special characters, punctuation, and even spaces. Switch a few letters for characters and use both upper and lower case for the best passphrase, so you could have a passphrase like this (but don't use this one!):

I ne3d a rea1ly b!g coff3e n0w!

Unique Passphrases

Use a different, unique passphrase for each program/application. By doing this - if one of your passphrases is compromised, your other accounts will be still secure. 

Changing Passphrases

Plan to change your passphrases every 3-6 months. Learn how to change your NetID passphrase.

Managing Passphrases

Overwhelmed by the thought of needing separate passphrases for all your accounts AND needing to change them regularly? Consider using a password manager, such as LastPass, which Stony Brook offers free to all students and staff.

Password Privacy

• Do not share your passphrases - this includes sharing passphrases via text message, phone call, email, and online form. 
• Try to avoid writing passphrases down - passphrases should never be stored in a document on your computer; if you must write down a new passphrase, write it down and carry it with you (and be sure to destroy the paper once you've memorized it)

Keep your passphrases private and do not share them. Know that DoIT will NEVER ask for your passphrase through email nor over the phone, and you should never submit your passphrase in a email/web form. Learn more about Phishing Scams.   

If you receive an email that is suspicious but inadvertently fill out a form or click on a link, contact Customer Engagement & Support and change your NetID passphrase immediately.

If you will be graduating, transferring, resigning, retiring, or taking a leave of absence from Stony Brook, please be aware of the University's NetID activation/deactivation business rule which affects access to other University systems and computing resources.

For information on your accounts when you leave Stony Brook, go to https://it.stonybrook.edu/guides/leaving-stony-brook