Although HarvardKey holders are not required to change passwords at any specific interval, you must change your password if you ever feel that your account may have been compromised or your password exposed to others, even unintentionally.
You can change your password at any time in the HarvardKey self-service portal. Simply visit key.harvard.edu and select the "Manage Your Account" option. After you change your password, you'll want to make sure that you update that password anywhere that it might be stored, such as in your email preferences or apps on your phone or tablet — particularly since repeated login attempts with the wrong password may result in your being locked out of your account. For more information on synchronizing your passwords, see Step 3 in this guide (instructions are for HarvardKey password changes, but apply to other login types, too). If you're confused about which login type gets you into which application, check this itemized list of applications' login types, organized by School. Please note that after you change your password, you may need to log in again to any other HarvardKey-protected applications or browser windows you have open at the time of your password change.
You can also learn more about best practices for password safety and security at Harvard by visiting the Information Security password guide.