FAQs: How to properly manage your JumpCloud password

After using JumpCloud to encrypt a system, enforce Multi-factor Authentication (MFA), require strong passwords, and scan continuously for malware threats, we want to manage the identities and passwords in this well-fortified environment.

There are four passwords on your macOS device that must be kept in sync:

1. JumpCloud user password - Used to log in to your JumpCloud User Portal.

2. FileVault (if enabled) - Used to unlock FileVault when your device is started up. In most scenarios, the FileVault password and the device password are the same, but they should be understood as distinctly different.

3. Device password - Used to log in to your device after FileVault is unlocked.

4. MacOS Keychain - Used to access passwords, logins, secure notes, etc. that you have saved on your Mac.

There are three methods to change your JumpCloud password:

• JumpCloud Menu Bar App (recommended)

To change your JumpCloud password in the JumpCloud menu bar app:

1. Click the JumpCloud logo in the menu bar to open the JumpCloud menu bar app.

2. Hover over the Your computer password is an up-to-date message, then click Reset Password.

3. In the JumpCloud Password field, enter your current JumpCloud user password.

4. In the New Password field, enter your new JumpCloud user password.

5. In the Confirm Password field, enter your new JumpCloud user password again.

6. If your organization requires an Authentication Method, enter your TOTP from your authentication app or accept the login push request on your mobile device. 

7. Click Save.

After the JumpCloud menu bar app saves your passwords, JumpCloud updates the FileVault and Keychain accordingly.

• User Portal (recommended)

To change your JumpCloud password in the User Portal:

1. Log in to the JumpCloud User Portal: https://console.jumpcloud.com/login.

2. Go to Security.

3. Under Password, click Reset Password.

4. To update your password, enter your current password, your new password, and your new password again. Password complexity requirements are determined by your IT Admin. If you forget your password, you can also request a password reset by clicking Reset User Password on the User Portal login screen.

5. Click Update Password.

6. Follow the instructions in Syncing Your JumpCloud Password with Your Device Password to update your password in the menu bar app if asked.

• System Settings (least recommended)

If a user changes a device password in System Settings (formerly System Preferences), their JumpCloud password will be out of sync with the device, and they will be prompted to reconcile the two passwords. This process will sync their JumpCloud password back to the device, rather than updating the JumpCloud password. They will then be able to use their JumpCloud password to log in to their device and access their JumpCloud managed resources.

Considerations

• The JumpCloud passwords you create must adhere to the complexity settings your organization requires for user account passwords. You’ll get an error if you attempt to create a non-compliant password. 

• Your password also has to adhere to the password complexity settings of the applications you log in to using JumpCloud. If you need help determining the password complexity settings of the applications you use, ask your IT Admin.

• If your account gives you access to SSO applications, it may take several minutes for your password to update for your SSO applications after you change it in JumpCloud.

• Note that when you change your password, any active sessions (User Portal, SSO applications, etc.) will be terminated.

JumpCloud requires passwords to have a minimum length of 10 characters and include at least one uppercase letter, one lowercase letter, one number, and one special character.

JumpCloud encourages users not to reuse their previous passwords. It's recommended to create a unique and new password to enhance account security.

While there is no strict policy mandating regular password changes, it is a good practice to update your password periodically for enhanced security. Consider changing it every 90 days.

If you forget your password, visit the JumpCloud User Portal in your browser: https://console.jumpcloud.com/login enter your forgotten password until the Authentication Failed appears and click on the below "Reset User Password" link. Follow the instructions to reset your password via email.

It's highly recommended not to use the same password across multiple accounts. Using unique passwords for each account adds an extra layer of security.

Yes, JumpCloud supports multi-factor authentication (MFA). It's advisable to enable MFA for an additional layer of security beyond the password.

JumpCloud employs robust security measures to protect user passwords. However, your password's security also depends on its complexity. Choose a strong, unique password to enhance security.

Sharing passwords is a security risk. Avoid sharing your JumpCloud password with anyone. If someone else needs access, they should have their own account.

If you suspect unauthorized access, change your password immediately. Contact our IT support team to report the incident and take any additional steps recommended by them.

To change your JumpCloud password using the Windows App:

1. In the system tray, click the JumpCloud Windows App icon.

2. Click Password.

3. Click Reset Password.

4. In Current Password, enter your current password.

5. In New Password, enter in your new password.

6. Enter your password again in the Confirm Password.