Activation passwords

You can send activation information to users so that they can activate BlackBerry devices. You can either generate an activation email message that includes an automatically generated password, or specify an activation password that is unique to the user account. If you decide to send only one activation email message, be sure to specify the activation password in the email message.

You must communicate the activation password to users with local user accounts that do not have an email address by a means other than an activation email message.

Item

Description

Length of the activation password

Typical activation passwords are four to eight characters long. Activation passwords are limited to 31 characters

Character support

The password must not contain special characters. Some devices do not support special characters and do not unlock when a user types a password that contains special characters.

Security

Wireless activation is designed so that short activation passwords do not compromise the security of the protocol.

You must distribute the activation password to the user securely. If the user receives the activation password, but does not activate the device on the BlackBerry Device Service, an attacker who can access the activation password can connect another device to the BlackBerry Device Service and assume the identity of the intended user.

When a user activates a device on the BlackBerry Device Service, the activation password becomes inactive and a potentially malicious user cannot reuse it to activate another device.

Expiry time

An activation password is no longer valid if any of the following events occur:

  • The user does not activate the device on the BlackBerry Device Service before the expiry time elapses (default 48 hours)
  • The user types the activation password incorrectly five consecutive times
  • The BlackBerry Device Service activates a device using the activation password