password 500 characters

IT Requires EMR Password to be 500 Characters Long

  • 4K
    Shares

BOSTON, MA – Reflecting what is soon-to-be standard practice at all health care systems across the country, the Information Technology Department at Massachusetts Lieutenant General Hospital (MLGH) requires that anyone accessing the electronic medical record (EMR) have a password that is at least 500-characters long effective today.

password 500 characters
Only 491 characters to go

“The requirement illustrates our shared concern over patient privacy and HIPAA, especially in our current climate,” explained MLGH information technologist Catherine Spiller, who has been actively entering her passcode for the past 15 minutes.  HIPAA refers to the Health Insurance Portability and Accountability Act of 1996.  “Eight to 12 characters isn’t enough; 500 characters is the way to go.”

In addition to choosing a 500-character password, Spiller and her IT team also require the password to be as strong as possible by containing the following characters: at least 185 lowercase letters, at least 211 uppercase letters, 1 punctuation, 7-to-9 numbers (no repeats), 3-to-23 underscores, 1-to-6 dashes, 1 hieroglyphic, at least 4 letters of the Greek alphabet, at least 3 emojis, the name of one living grandparent in caps lock, and the trade name of an ACEI inhibitor.

This development is the latest of a series of enhanced security features seen across this country’s healthcare information technology landscape over the past few years.  Though the 500-character-long password is new and anticipated to be effective, the recent security enhancements of changing your password every 20 minutes or the computer exploding if you guess your password incorrectly two consecutive times still apply.

“We do not anticipate any impact on the work flow of healthcare professionals,” added Spiller, still typing in her password and hoping she gets it right on the first go.

She doesn’t.

“That’s my fault,” she laughed, holding down the backspace key for the next 5 minutes.  “I totally forgot to capitalize the 83rd H.”

IT also expects to release a fleet of new “extra sticky” keyboards to help facilitate security access.

image_pdfimage_print
  • Dr. 99

    First there was Dr. 01, the first robot physician, created to withstand toxic levels of burnout in an increasingly mechanistic and impossibly demanding healthcare field. Dr. 99 builds upon the advances of its ninety-eight predecessors by phasing out all human emotion, innovation, and creativity completely, and focusing solely on pre-programmed protocols and volume-based productivity. In its spare time, Dr. 99 enjoys writing for Gomerblog and listening to Taylor Swift.

  • Show Comments

Your email address will not be published. Required fields are marked *

comment *

  • name *

  • email *

  • website *

You May Also Like

abim

American Board of Internal Medicine on MOC: “Our Intern Got It Wrong”

411SharesPHILADELPHIA, PA – On top of numerous changes, the American Board of Internal Medicine ...

Dilaudid & Morphine Shortage Prompts Pharmacy to Switch to Heroin PCA Pumps

6.9KSharesSMITHVILLE, AR – The ongoing rise in demand for opiate medications, combined with limited ...

nephrology

Always Blame Nephrology

2.5KSharesIntern: Patient’s BP is now 90/50. Resident: This is from pulling too much fluid ...

doc mcstuffins

Study: Doc McStuffins More Evidence-Based Than Dr. Oz

139.1KSharesANAHEIM, CA – Public health researchers have published the results of a new study which ...

Anesthesiologist Puts Up Drape, Puppet Show for Surgeons

6.8KShares NORFOLK, VA – Anesthesiologist Thomas Kingston was the hit of the OR today. ...