Home » Security Bloggers Network » Lock Out Hackers: Why Every School Needs Strong Passwords

Lock Out Hackers: Why Every School Needs Strong Passwords

by Alexa Sander on February 26, 2025

Lock Out Hackers: Why Every School Needs Strong Passwords

We recently hosted a live webinar to help kick off 2025, encouraging you to strengthen your school district’s cybersecurity and online safety systems. This webinar featured two expert K-12 guest panelists: Skip Cooley, Director of Technology at Clinton School District, and Tyler Derickson, Cybersecurity & Systems Administrator at Arbor Park School District 145. We thank both Skip and Tyler for sharing their tips, insights, and field-tested strategies on how to ensure your district’s data is secure and protected for a successful new year.

To kick off this two-part webinar blog series, we’re going to start out by discussing the importance of password maintenance.

No More Default or Weak Passwords

Passwords might not be the hottest topic in the teachers’ lounge, but they serve as a first line of defense against hackers. Many schools start the academic year with default passwords—such as a student’s name or birth year—that are easy to guess and risky.

Both Skip and Tyler recommend regularly updating passwords and usernames, especially for accounts managing sensitive student data. Aim for passwords with at least 16 characters, or use a passphrase by combining 2-3 simple 5-letter words for an easy-to-remember yet secure alternative.

Implement Multi-Factor Authentication (MFA)

If your district hasn’t fully embraced multi-factor authentication (MFA) yet, now is the time to do so. MFA strengthens your district’s Google Workspace and Microsoft 365 security by requiring an extra verification step beyond a password—using authenticator apps, security keys, biometrics, or one-time passwords.

Acting as a digital security guard, MFA prevents unauthorized access even if a password is compromised. Tyler strongly recommends MFA for admin accounts managing sensitive data, as it offers a multi-layered defense that significantly deters hackers.

While browsers are useful for surfing the web, they aren’t the best option for keeping your credentials safe. Storing passwords in browsers is like hiding your keys under the doormat—convenient, but not particularly secure.

In shared school environments, this practice could expose sensitive information, especially since browsers also store session tokens or cookies that keep users logged in, allowing hackers to bypass MFA. To keep your district’s data secure, use a dedicated password manager that offers encryption and supports MFA.

Ready to start strengthening your district’s cybersecurity? Try ManagedMethods today!

To wrap up, our recent webinar featuring K-12 experts Skip Cooley and Tyler Derickson provided actionable cybersecurity tips to help strengthen your district’s cybersecurity for the new year. As we begin this two-part series, remember that strong passwords and multi-factor authentication are key to a safe digital environment.

For added protection and online safety, consider trying out ManagedMethods. Our simple-to-use, affordable products are designed for K-12 schools, offering robust Google Workspace and Microsoft 365 security and safety and protection for students without requiring complex setup or extensive training. Check out our free 30-day trial today!