The following are DOLA and Oracle password policies:

• All passwords are CASE SENSITIVE. For example, "PASSWORD" is not the same as "password".
• Passwords MUST START WITH one of the 26 letters.
• Passwords MUST CONTAIN at least one letter, one digit, and one special character.
• Passwords MAY CONTAIN any of the 26 letters, ten digits, and three special characters (# [pound sign], $ [dollar sign], and _ [underscore]). No other special characters are permitted, since many of them have special meaning in Oracle.
• Passwords MUST BE between 9 and 30 characters long, inclusive.
• You CANNOT use a password that contains your username.
• All new passwords MUST differ from last password by at least 3 characters.
• Your new password is good for 90 days. You have a grace period of seven days after the password expires to change it.
• You may not reuse a password for 540 days (six cycles).

If you need further assistance, please submit a ticket using one of the following three methods:

• Visit https://oitservicedesk.state.co.us/ to use the self-service portal.
  
  
• Send e-mail to OIT_ServiceDesk_HQ@state.co.us.
  
  
• Call 303-239-4357, Option 5, then Option 1.