What should I do after my CalNet gets unlocked?

Now that your CalNet account has been unlocked, you must reset your passphrase as follows:

  1. Go to https://mycalnet.berkeley.edu

  2. Select "Forgot my CalNet ID / Passphrase"

  3. Enter your Student, Employee, or Affiliate ID NUMBER, or recovery email address

  4. Confirm that you are not a robot by selecting all of the applicable images

  5. Once you receive the email to reset your passphrase, enter your Student, Employee, or Affiliate ID number again to set a new passphrase

Because your exposed CalNet passphrase puts the security of your personal data at risk, you must also complete each of the following tasks after you reset your passphrase.

  1. If you are a UC Berkeley employee, confirm that no changes have been made to your Direct Deposit account. From a safe and malware-free computer, access the Direct Deposit link from https://ucpath.berkeley.edu/ or call Payroll (510-642-1336).  

  2. Confirm that your email is not being redirected to any account you do not recognize via unauthorized email forwarding, and make sure there are no filters you did not create (e.g. send all <my bank emails> to my Trash folder.

    1.  How to forward emails from bMail account: https://support.google.com/mail/answer/10957?hl=en

    2. How to use filters in bMail: https://support.google.com/mail/answer/6579?hl=en

  3. Review bMail account logs and sign out of active sessions

    1. Log into your bMail account

    2. In the very lower right corner, under "Last account activity" click the "Details" link

    3. This will show the last few connections to your account; review for unknown logins

    4. On the same page, click the large gray button "Sign out of all other web sessions"

  4. Re-secure your Recovery Email Address by changing the password. The recovery email address is a non-"berkeley.edu" email address attached to your CalNet account. Resetting the password on this account helps ensure that it is also not compromised.

  5. Recreate your bConnected Google Key. If you had a Google key set, it has been scrambled. Create a new one using the Manage My Keys application: https://idc.berkeley.edu/mmk/  or contact bConnected support: bconnected@berkeley.edu or 510-664-9000 press 1 and follow the prompts.

  6. Review your CalNet 2-Step devices to make sure no changes have been made. Log in to mycalnet.berkeley.edu, click on Manage 2-Step Verification, perform a 2nd 2-Step to see the Device Control Panel, and review your devices, there. See: https://calnetweb.berkeley.edu/calnet-2-step