If you receive an email to update your password and are concerned it may be a phishing attempt, it's better to just not click on any links in the message. This is particularly true for your CUIMC email if the message is marked as External.

Instead, manually type in a known website address and navigate to tools or help for your account as follows:

Columbia UNI - go to https://www.columbia.edu, scroll to the bottom of the page and select the Manage My UNI link under the Resources heading.

CUIMC Email/MC Domain - go to the CUIMC IT home page at https://www.it.cuimc.columbia.edu then select the myPassword link.

See the Information Security Office's Don't Get Hooked infographic for general help with phishing.