/
Frequently Asked Questions

Frequently Asked Questions


About Passwords

Why are Marmot libraries implementing passwords?

The library profession prioritizes the protection of patron privacy as a core tenant of the Library Bill of Rights. Colorado law also requires that “reasonable steps” be taken to protect personally identifiable information. Implementing passwords for access to patron data is a reasonable step.

Passwords are for more than just keeping patron reading history private. Personally identifiable information such as personal contact information can be more easily accessed without passwords in place - information that has the potential to result in identity theft or other crimes.

Why are we calling these PASSWORDS rather than PINs?

Cultural use and acceptance of the word PIN implies a four digit identification number. Although this is certainly better than nothing, Marmot decided to alter the language to reflect an even more secure and customized authentication token. Cultural use of the word PASSWORD implies an alpha-numeric token. Passwords also have generally accepted complexity standards - such as uppercase characters, lowercase characters, numbers, and symbols - that we can direct patrons toward in order to encourage more secure authentication tokens.

Will we see any decreases in holds, circulation, or renewals once passwords are implemented?

Libraries that have implemented passwords have not experienced declines in holds, checkouts, renewals, or library use.

What systems will require passwords and which won’t?

Systems Impacted

Not Impacted

Highly Suggested

Systems Impacted

Not Impacted

Highly Suggested

Pika

Staff computer logins (Windows and Mac logins)

Third party databases or resources (non proxied)

Self-registration

Sierra Webpac for request by staff functionality

Library event registration systems

Sierra Webpac for Patrons

Library websites

Individual library SIP2 or Patron API connections (regardless of Marmot hosting)

Shared eContent Sources (ex. Overdrive/Libby)

Statistics

 

Proxy

Sierra Desktop staff access

 

Patron record loads

Envisionware PC Reservation and LPT:One (can be used, but cause some functional issues)

 

Patron record creation

 

 

Express Lane Self Checks

 

 

Why is this level of security being put into place now?

Colorado law has recently changed such that this level of security is required. There have been dramatic nationwide and worldwide increases in cyber crime, identity theft, and the commodification of PII. This level of security is more important now than in the past.


Getting Started

What is a patron’s initial password?

Libraries will have a choice between two default password structures.

Option 1: first three letters in the name field and the last four digits of the barcode.

For example John Doe, with a barcode of 987654321 would have either of the following default passwords (depending on whether the name field is populated last name first, or first name first):

  • doe4321

  • joh4321

Option 2: first three letters in the name field and the last four digits of the phone number.

Using the same example: John Doe, with a phone number of 555-270-6789 would have either of the following default passwords (again, depending on whether the name field is populated last name first, or first name first):

  • doe6789

  • joh6789

We strongly recommend patrons changing their password to one that is meaningful to them. Passwords should include uppercase and lowercase letters, numbers, and special characters.

How do patrons get a password?