DON'T SEND YOUR PASSWORD. Ever. To anyone. Not even OIT.
All of us receive e-mail messages that claim to come from OIT or the Credit Union. Such e-mail typically threatens to close our network accounts, delete all our e-mail, or make our Credit Union deposits unavailable -- unless we e-mail our passwords or other personal information.
To protect yourself and Princeton, NEVER RESPOND to such e-mail. Princeton departments and organizations will NEVER ask you to e-mail your password. NEVER. These e-mails are a scam, a clever forgery that appears to come from a Princeton group. It is "phishing" for your personal information to try to steal your identity or to attack Princeton's technology resources.
If you receive such e-mail, DELETE IT and NEVER SEND YOUR PASSWORD. Ever. To anyone. Not even OIT.
For more information about phishing and other security issues, see www.princeton.edu/itsecurity.