New Westlaw OnePass Security Requirements
—All Users Must Switch by January 31, 2010
__________________________________________________________
Westlaw is in the process of switching user accounts to a more robust password standard they are calling OnePass. We have been informed of several problems our users have had in changing their accounts over to the new standard, and the law librarians are actively working with West on solutions for the problems we know about. There was no announcement, prior to last week, that West would make this change.
Details and Instructions after the jump….

The Basics
The Westlaw password issued to you initially will now become your “activation code,” similar to the LexisNexis customized password system. However, eventually, the alphanumeric Westlaw password may disappear completely. Westlaw representatives indicate that they must convert to this more robust password standard due to Sarbanes- Oxley(SOX)Act requirements, and the “OnePass” system also standardizes access across some of Thomson Reuters’ other web-based products.
Most existing users have until January 31, 2010 to update their Westlaw accounts. Some users report that they were forced to update their passwords as of November 1st, the day Thomson Reuters announced the conversion. This seems to have affected users that never adopted the optional Westlaw custom username and login. Users who did create a custom username and login password still need to change their login to the new OnePass standard, which has different and more rigorous requirements for username and password security.
If Westlaw does not prompt you to create your new OnePass account:
• Go to:
https://lawschool.westlaw.com/registration/registration09.asp
• Click on the link at the Updating Your Account Information option
What is Required?
“Username:
• From eight to 70 characters
• Characters must contain at least two of the following attributes:
—–Uppercase letter(s)
—–Lowercase letter(s)
—–Number(s)
—–Certain special characters—specifically:
period (.), at symbol (@), hyphen (-) or underscore (_)
• Must be unique from all other OnePass users
• E-mail addresses may be valid usernames
• Must not include any spaces or your alphanumeric Westlaw password.
Password:
• From 8 – 16 characters
• Characters must contain at least three of the following attributes:
—–Uppercase letter(s)
—–Lowercase letter(s)
—–Number(s)
—–Certain special characters—specifically:
period (.), at symbol (@), hyphen (-) or underscore (_)
• Must not include any spaces or your e-mail address.
Security Questions:
• Depending on when you first registered your existing Westlaw password, you may have not specified a security question.
• In the event you forget your new OnePass username and password, these questions allow the system to verify that you are in fact you, by presenting you with a question that only you know the answer to.”
If all this seems too confusing, there is an online OnePass Set-Up Demo at: http://lscontent.westlaw.com/images/content/flash/onepass_viewlet_swf.html
Problems Encountered—Things to Know
Most users seem to manage with no problems at all, but some have sought help from Judy Kaul or Megan Allen. We have contacts in Westlaw’s password management system that should provide assistance.
• You may get an error message stating, “We are unable to complete your request at this time” and it appears that your account changes did not take effect. However you should try the username and password you just created. While the message states the changes were not completed you may find that your new username and password do work!
• If you forgot your original OnePass Username or Password:
View a demonstration of how to retrieve them at:
http://lscontent.westlaw.com/images/content/flash/forgot_your_username_and_password_viewlet_swf.html
• Sometimes Westlaw Support has to create a temporary OnePass password for users. A temporary password expires after 24-hours.Then you have to request a new temporary password.
• Common user error: When confirming the new password, user cuts and pastes the proposed new password into the password confirmation form, but adds a space at the beginning and end of the password causing it to fail.
• For Case Western Reserve University School of Law Faculty, Students and Staff: If you try to enter your new username and password into the system unsuccessfully three consecutive times, your account automatically locks. Contact Judy (judith.kaul@case.edu) or Megan (megan.allen@case.edu) to get it unlocked.