Sign-in rules for staff

Each school decides how strict staff sign-in should be. The owner sets this once in the Security section of Customize your school. Parents and students are never limited by the network list or the idle timeout.

Steps

1. Open Settings > Security. You can also reach it from the Security card on Settings > Customize.
2. Shortest password. Choose between 10 and 32 characters. It applies to every login.
3. Change passwords. Never, Every 90 days or Every 180 days. Staff must choose a new password after that time.
4. Sign out idle staff. Choose Never or after 15 minutes, 30 minutes, 1 hour, 2 hours or 8 hours without activity. Shorter is safer on shared office computers.
5. Require two-factor for. Owners and accountants always need it. Tick more staff roles, such as principal, to require it for them too.
6. Allowed networks. To let staff sign in only from the school, enter the school's internet address or range, one per line. Leave it empty to allow any network. Owners are never blocked.
7. Tell the owner about new devices. The owner gets a notice when a staff login signs in from a device not seen before.
8. Save.

Good practice

• Give every person their own login. Never share one login at the counter.
• When a staff member leaves, switch their login off in Users the same day.
• Use Reset password in Users if someone forgets their password. It signs them out on every device and they choose a new password at the next sign-in.

اہم

Before limiting networks, check your school's internet address with your internet provider. A wrong range blocks staff (but never the owner) until it is corrected.

Related

• Two-step sign-in
• Roles, permissions and users
• Customize your school