Since the inception of Google Apps for Education at CWRU, the Information Security Office has advised users to use different passwords for their CWRU Network ID password and the Google Password. However, a recent authentication infrastructure change has minimized the risk of password disclosure during the data transfer process from CWRU to Google, obviating the need to for users to keep separate passwords for CWRU and Google Apps for email clients.
CWRU users who primarily use the web email interface will not be affected by this change. The login process to web email involves first authentication to the CWRU Single Sign On service, which require the valid CWRU Network ID and password. Most users are not aware they have a Google Password if they use the web email interface. Users of "fat" email clients such as Thundberbird, Outlook, Mail.app, and on various mobile platforms, such as smart phones, need to use a Google password to permit these applications to log directly into the Google IMAP service. This password is set on the ITS Password Change utility on the left menu item "Reset Your Google Password."
The Information Security Office now advises users that they may use the same password for both the CWRU Network ID and the Google Password, noting that the annual password change requirement* will affect the CWRU Network ID, but not the Google Password.
* (as required, see http://www.case.edu/its/password-change.html for additional details)