Frequently Asked Questions

PennKeys

What is a PennKey and who needs one?

A PennKey is an individual's username and an associated password within the PennKey authentication system. A PennKey is required to authenticate your identity for access to many of Penn's online resources.

Who is eligible for a PennKey?

University of Pennsylvania faculty, staff, students, and alumni; employees of the University of Pennsylvania Health System; and sponsored guests (individuals who have an official business need for accessing restricted Penn resources) are eligible for a PennKey. Some examples of sponsored guests include consultants, volunteers, visiting scholars, and course auditors.

How do I get a PennKey?

How you get a PennKey all depends on what your affiliation is with the University.  For example, departments facilitate the PennKey process as part of on boarding new faculty and staff. Alternatively, the process for incoming students is fully automated. PennKeys for guests and temporary affiliates are initiated by the sponsoring department, center or school.

What should students, faculty, and staff who don't have a U.S. Social Security Number (SSN) enter when the last four digits of their SSN are requested on a PennKey registration logon screen?

They should enter the last four digits of the 9-digit identifier (ID) they received from the University. This ID takes the form xxx-xx-xxxx and is variously referred to as a Student ID, a Federal Taxpayer ID, and a Penn-assigned SSN. Students typically receive this identifier from their admitting program office, while faculty and staff receive it from their business administrator.

Newly admitted students who did not provide a U.S. SSN with their application are also issued a Penn-assigned SSN to use during PennKey registration. 

Can I change my PennKey username after I register it?

Your PennKey username can be changed only under the following circumstances:

  • A legal name change
  • A PennName is deemed offensive to the Penn community
  • Reported email harassment or threats that warrant a change

Provided that you meet one of the criteria above, to initiate a request for a PennKey username change, contact the IT support staff of your school or center. Please note that if your PennKey username changes, so will your username on all other systems that are based on your PennKey username such as your email account name.

I've forgotten my PennKey username and/or PennKey password! What do I do now?

If you can't remember your PennKey username, log in to the Forgot My PennKey Username application to retrieve it.  Please note that this application requires that you have an email address in Penn's systems.  If you do not, please contact the PennKey Support Team.

How long will my PennKey stay active?

PennKeys generally do not expire. However, an active PennKey alone does not grant access to PennKey-protected services. Authorization (access or eligibility to use a service) is determined by the owners of individual services and may change or be terminated if your University affiliation or status changes.

How long will my PennKey work for a given Penn computing service?

Your PennKey alone doesn't authorize you to use campus computers or services. It only proves your identity. Authorization is the service owner's decision. For example, say that you change jobs within Penn. Previously you had access to departmental financial data via BEN Reports, but that's not part of your new job. You'll still be able to use your PennKey for authorized services like U@Penn, but you won't be able to access the financial data you previously were authorized to access.

Setup Codes

What are PennKey Setup Codes and how do they work?

PennKey Setup Codes are temporary codes used to register PennKeys via the PennKey Registration application. A Setup Code expires once it's been used or 60 days from the issue date, whichever comes first. A Setup Code can be used to (1) register a new PennKey, or (2) reset a PennKey password if you have forgotten it and are not enrolled in the PennKey Recovery Service.

Can a Setup Code be reused?

Once a setup code has been used to register a PennKey, it cannot be reused.

How do I get another Setup Code if I lose mine or it expires?

You can always get a replacement Setup Code by visiting a PennKey administration station or by requesting one via the Setup Code Service.  The Setup Code Service will send you a new code via U.S. postal mail. Note that once you request another Setup Code by any means, the previously requested Setup Code becomes invalid.

I requested a Setup Code via the PennKey Setup Code Service but it hasn't arrived. What should I do?

Please note that If you've allowed enough time for the Setup Code to reach you, please contact the PennKey Support Team to learn the status of your request and what address the Setup Code was sent to. Before requesting a second Setup Code, keep the following in mind:

  • The new Setup Code request will invalidate the previous Setup Code. If the Setup Code you originally requested does arrive, it will not work.

  • If your address is incorrect or out of date, the Setup Code will not reach you.  To update your address, see "How do I update my address of record?" below.

What is meant by “address of record” and how can I determine that mine is correct?

Address of record is linked to your status (applicant, student, alumnus/a, Penn employee, UPHS employee, other). Details, including instructions on how to check, and if necessary, update your address.  See "How do I update my address of record?" below.

How do I update my address of record?

  • If your address is incorrect or out of date, the Setup Code will not reach you.  To update your address:

    • Students: Contact the Office the Registrar.

    • Faculty & Staff: Contact the business office of your department.

    • Guests: Contact the department that is sponsoring your visit.

PennKey Passwords

When I try to create a password, it gets rejected because it supposedly contains a dictionary word, though I don't think it does. What's going on?

"Dictionary" does not simply mean a standard English language dictionary -- it also includes foreign language dictionaries and all kinds of specialized dictionaries that hackers use to crack passwords.

I've forgotten my PennKey password. What should I do?

You will need to reset it -- no one can retrieve a forgotten password for you. If you previously enrolled in the PennKey Recovery Service, you can reset your password online instantly. Otherwise you need to obtain a new Setup Code.

Can my PennKey password be reset manually by a PennKey administrator, or can someone tell me what it is if I forget it?

No. Passwords are stored in the system in encrypted form, and cannot be read by administrative personnel. Only you should ever know what your password is.

I know my PennKey password but would like to change it. How do I do it?

You can reset your password to something that you prefer by using the Change PennKey Password application.

I think somebody “stole”, or found out my PennKey password. What should I do?

If you believe that your PennKey password has been compromised, contact the Office of Information Security at security@isc.upenn.edu or 215-898-2172. They can immediately issue a Setup Code against your PennKey that will effectively “freeze” your PennKey until you can obtain a Setup Code to reset your password. If you believe that any criminal activity has taken place or will take place, it is strongly recommended that you contact Penn Public Safety at 511 (on-campus) or 215-573-3333 (off-campus).

Usage

I'm able to access most things that require PennKey (PennInTouch, PennPortal, etc.), but cannot access some of the Library resources I need. What's wrong?

If you are having trouble accessing Library resources, visit any Library Circulation Desk and consult with Library staff. Note that not all Penn affiliates are authorized to access Library electronic resources. For more information, visit the Penn Libraries website. 

How can I tell if my PennKey works?

Try the Test My PennKey application. If you can authenticate successfully in that application, your PennKey username and password are functioning properly.

I verified my PennKey using the Test My PennKey application, but I still can't access a PennKey-protected online resource. What do I do?

If the service uses PennKey authentication, report your access problem to the service or application owner. Your login problem may be specific to that service, rather than being a PennKey problem.