|
XSTRA Password Security & XCONNECT Guide
Password requirements, account protection and simple ways to change your password
|
Your password protects access to your XSTRA-hosted services
Use a long, unique passphrase
XSTRA applies password controls to help protect Citrix, Remote Desktop and other managed Windows accounts. These controls work together with Duo multi-factor authentication and other security measures to reduce the risk of unauthorised access. On supported computers, XCONNECT provides a quick and convenient way to change your password and obtain information that can assist the XSTRA Help Desk.
Important: Never share your password with another person, reuse it for unrelated websites, or store it in an unsecured document, email or note.
XSTRA password requirements
Your new password must meet all applicable requirements below.
| 1 | Minimum length: At least 15 characters. |
| 2 | Personal details: It must not contain your name or username. |
| 3 | Character types: Use at least 3 of these 4 types: uppercase letters, lowercase letters, numbers and special characters. |
| 4 | Password history: Your last 10 passwords cannot be reused. |
| 5 | Minimum age: A password can only be changed once per day. |
| 6 | Maximum age: Passwords must be reset at least every 365 days. |
Australian cyber security guidance: These controls form part of XSTRA’s broader approach to account protection and security hardening. For general Australian Government cyber security guidance, see the ACSC Essential Eight.
Account lockout protection
After 10 failed login attempts, the account will be locked for 30 minutes. The failed-login counter also resets after 30 minutes. If you are unsure of your password, stop retrying and contact XSTRA support rather than continuing to enter different passwords.
Creating a strong password you can remember
A longer passphrase is usually easier to remember than a short collection of random characters. Combine several unrelated words or a memorable sentence, then include numbers, capital letters or punctuation so it meets the policy.
|
Good approach
Use a unique phrase of 15 or more characters that you do not use anywhere else.
|
Avoid
Names, birthdays, company names, keyboard patterns, small variations of an old password or passwords used on other websites.
|
Examples of memorable passwords or passphrases
The examples below show how a longer phrase can meet the 15-character requirement while using several character types:
| FishingTime2026!! |
| #OnTh3C4llalwayz# |
| I met him I laugh3d!! |
Do not use these exact examples. They are published here only to demonstrate the format. Create your own unique wording that is not based on personal details and is not used for any other account.
What is XCONNECT?
XCONNECT is XSTRA’s Windows system tray tool. It appears as a blue X icon near the Windows clock and gives users a quick way to change passwords, view computer details and review recent messages from XSTRA.
Quick access: Right-click the blue X icon in the notification area.
Host Information shortcut: Local PC = Ctrl + Alt + X | Citrix = Ctrl + Alt + S
Host Information shortcut: Local PC = Ctrl + Alt + X | Citrix = Ctrl + Alt + S
|
Find the XCONNECT icon
Look near the Windows clock. If the icon is hidden, select the small upward arrow to display the hidden system tray icons.
 |
Open the XCONNECT menu
Right-click the icon to open the menu. Leave XCONNECT running unless XSTRA Support asks you to close it.
 |
Menu options: Host Information shows the PC name, logged-in user, domain and IP address; Change Password opens the password-change form; Message History shows recent XSTRA notifications; and Exit closes XCONNECT.
Method 1: Change your password using XCONNECT
On supported Windows computers, XCONNECT is normally the quickest and simplest way to change your domain password.
|
Open Change Password
|
Complete the form
 |
Built-in assistance: The XCONNECT form may provide Generate Password and Generate Passphrase options. A generated passphrase can be easier to remember while still meeting the required length and complexity.
XCONNECT also helps the XSTRA Help Desk identify your computer
|
Select Host Information to display the computer hostname, username, domain and local IP address. When contacting XSTRA Support, reading these details to the engineer helps identify exactly which computer or session you are using.
Keyboard shortcuts:
Local computer: Ctrl + Alt + X Citrix session: Ctrl + Alt + S |
 |
Other ways to open the Change Password screen
|
Citrix Workspace
Open the Citrix session toolbar at the top or side of the screen and choose Ctrl+Alt+Del. On the Windows Security screen, select Change a password.
|
Remote Desktop (RDP)
While inside the remote session, press Ctrl + Alt + End. This opens the Windows Security screen, where you can select Change a password.
|
Direct Windows login: On a physical Windows computer or console session, press Ctrl + Alt + Delete and choose Change a password.
If the new password is not accepted
If you return to the Citrix or Windows sign-in screen after attempting a change, the new password may not have met the policy requirements.
- Try signing in once with the new password to confirm whether it was accepted.
- If it does not work, sign in with the previous password.
- Try the change again using a longer and more complex passphrase.
- Check that the new password does not contain your name or username and has not been used recently.
Because passwords can only be changed once per day, contact XSTRA support if you believe a successful change has already occurred but you still cannot sign in.
After changing your password
- Use the new password the next time you sign in to the affected XSTRA-managed service.
- Do not continue attempting the old password, as repeated failures can lock the account.
- Complete the Duo prompt as normal after your password is accepted.
- Store the password only in an approved password manager or another secure method authorised by your organisation.
Recent XSTRA messages
XCONNECT can display important notices about maintenance, restarts, service changes and work recently completed on your computer. If a pop-up was closed too quickly, right-click XCONNECT and select Message History. Messages older than 72 hours may be removed automatically.
Need help?
Contact XSTRA support if you cannot access the password-change screen, your password is repeatedly rejected, your account is locked, or you are unsure which account password needs to be changed.
XSTRA Support
For assistance with password changes or account access, call 1300 555 920.
Need more help with this?
© 2021–2026 XSTRA Group Pty Ltd (Australia). All rights reserved.