Frequently Asked Questions
- Adam Murray
- Sean Hanson (Deactivated)
- 1 About Passwords
- 1.1 Why are Marmot libraries implementing passwords?
- 1.2 Why are we calling these PASSWORDS rather than PINs?
- 1.3 Will we see any decreases in holds, circulation, or renewals once passwords are implemented?
- 1.4 What systems will require passwords and which won’t?
- 1.5 Why is this level of security being put into place now?
- 2 Getting Started
- 2.1 What is a patron’s initial password?
- 2.2 How do patrons get a password?
- 2.3 Will the default password or reset passwords be case-sensitive?
- 2.4 What are all of the components required for a patron to log in?
- 2.5 After passwords are implemented, how will new patrons get a default password?
- 2.6 How will new patrons using Pika’s self-registration get a password?
- 2.7 What will happen to linked accounts in Sierra and Pika?
- 3 Patron Support
- 3.1 How do patrons reset their passwords?
- 3.2 Are there complexity requirements for reset passwords, such as length, numbers, or special characters?
- 3.3 Will I be able to help patrons reset their passwords?
- 3.4 Can I tell a patron their password if they forget it?
- 3.5 Can I send a patron a new password if they forget it?
- 3.6 Can a patron still use their library card if they forgot their passwords?
- 3.7 How do patrons without an email address reset their passwords?
- 3.8 What about patrons who never reset their default password?
- 3.9 Once a patron resets their default password, will their new password ever expire?
- 3.10 If a patron never uses Pika, will library staff be forced to use Sierra to place holds for them, rather than using Pika’s masquerade mode?
- 3.11 Will all library staff have the necessary permissions to masquerade as patrons?
- 4 Third Party Resources
- 4.1 How do passwords affect a patron’s interaction with:
- 4.1.1 Overdrive?
- 4.1.2 Prospector?
- 4.1.3 PC Reservation guest passes?
- 4.1.4 Envisionware products?
- 4.1.5 Limited access cards?
- 4.2 Will the Libby password be the same as the PIKA password?
- 4.3 Will the password in Sierra remove any current holds that patrons have in Libby?
- 4.4 Will patrons only need to authenticate in Libby one time?
- 4.5 Will patrons’ default passwords work for OverDrive?
- 4.6 Will patrons be able to access materials they have already checked out during the 24 hour period before the system makes them log in with the new password, or will Libby block them?
- 4.7 If we have to reset a password in Sierra, will it take 24 hours for Libby to recognize the new password?
- 4.8 Will I still be able to place holds in Pika or in Prospector for a patron without knowing their password?
- 4.9 Are patron barcodes necessary for using PC Reservation?
- 4.10 How do passwords affect 3rd party resources that already use a username/password system?
- 4.11 Can 3rd party resources that use their own username/password system be convinced to use the Sierra passwords?
- 4.12 Will patrons be required to reauthenticate with their new password for 3rd party resources that use their own username/password system?
- 4.13 How do passwords affect 3rd party resources that authenticate via IP address?
- 4.14 What information can Marmot provide to help prepare 3rd party selfchecks (SIP2) for passwords implementation?
- 4.15 Do passwords need to be implemented for all 3rd party resources at the same time?
- 4.1 How do passwords affect a patron’s interaction with:
- 5 Other Resources
About Passwords
Why are Marmot libraries implementing passwords?
The library profession prioritizes the protection of patron privacy as a core tenant of the Library Bill of Rights. Colorado law also requires that “reasonable steps” be taken to protect personally identifiable information. Implementing passwords for access to patron data is a reasonable step.
Passwords are for more than just keeping patron reading history private. Personally identifiable information such as personal contact information can be more easily accessed without passwords in place - information that has the potential to result in identity theft or other crimes.
Why are we calling these PASSWORDS rather than PINs?
Cultural use and acceptance of the word PIN implies a four digit identification number. Although this is certainly better than nothing, Marmot decided to alter the language to reflect an even more secure and customized authentication token. Cultural use of the word PASSWORD implies an alpha-numeric token. Passwords also have generally accepted complexity standards - such as uppercase characters, lowercase characters, numbers, and symbols - that we can direct patrons toward in order to encourage more secure authentication tokens.
Will we see any decreases in holds, circulation, or renewals once passwords are implemented?
Libraries that have implemented passwords have not experienced declines in holds, checkouts, renewals, or library use.
What systems will require passwords and which won’t?
Systems Impacted | Not Impacted | Highly Suggested |
|---|---|---|
Pika | Staff computer logins (Windows and Mac logins) | Third party databases or resources (non proxied) |
Self-registration | Sierra Webpac for request by staff functionality | Library event registration systems |
Sierra Webpac for Patrons | Library websites | Individual library SIP2 or Patron API connections (regardless of Marmot hosting) |
Shared eContent Sources (ex. Overdrive/Libby) | Statistics |
|
Proxy | Sierra Desktop staff access |
|
Patron record loads | Envisionware PC Reservation and LPT:One (can be used, but cause some functional issues) |
|
Patron record creation |
|
|
Express Lane Self Checks |
|
|
Why is this level of security being put into place now?
Colorado law has recently changed such that this level of security is required. There have been dramatic nationwide and worldwide increases in cyber crime, identity theft, and the commodification of PII. This level of security is more important now than in the past.
Getting Started
What is a patron’s initial password?
Libraries will have a choice between two default password structures.
Option 1: first three letters in the name field and the last four digits of the barcode.
For example John Doe, with a barcode of 987654321 would have either of the following default passwords (depending on whether the name field is populated last name first, or first name first):
doe4321
joh4321
Option 2: first three letters in the name field and the last four digits of the phone number.
Using the same example: John Doe, with a phone number of 555-270-6789 would have either of the following default passwords (again, depending on whether the name field is populated last name first, or first name first):
doe6789
joh6789
We strongly recommend patrons changing their password to one that is meaningful to them. Passwords should include uppercase and lowercase letters, numbers, and special characters.