What is your password policy for students?

[Jobos]

Hi,

We are a primary school and I've set a fine grain password policy to set the student accounts to lockout after 10 invalid login attempts and reset after 5 minutes. Just wanted your opinion as already year 1 have locked the account and they are only using a 3 letter password and all lowercase.

 

Perhaps I am being too hard and expecting too much!

Edited September 4, 2019 by Jobos

[dobbyit]

We gone for all eyfs and ks1 with each class a general user account, all ks2 all passwords all set same school teachers choice, not the right way I know

[Maurice_Moss]

Here we stick with the USO credentials provided by LGFL's USO sync. We'll then distribute them to staff.

 

Perhaps I am being too hard and expecting too much!

 

Not at all, if they run into trouble they can always ask their teacher for support.

[LeMarchand]

Primary 1: NN/NN (both the same - last 2 digits of Intake Year). This is too challenging for most of the staff (!).

Primary 2: Year#/SameWordForAllPupils

 

I'd love to be allowed to at least make a move towards individual passwords, if only for the older ones.

 

Junior: NNISurname (Last digits of Intake Year, Initial, Surname - e.g. 19NStarter)/DifferentClean4letterWordDFESNumber (e.g. Geek6666). No expiry, teachers have list. Some "Class" accounts that had only sign into tablets - limited disk space on the tablets rapidly fills up with profiles otherwise.

 

Yep, I know it's not right - but no-one listens.

[unixman_again]

• Staff ids are the initials of the college, two digit year of joining and 2 digit sequential number - eg KE1210
  
• Student ids are their six digit student number, two digit year and 4 digit sequential number, which are ranged in a manner I don't know - eg this year the lowest number is 198800, last year was 186000.
  
• Password is 8 characters or more, with at least one each of number, lower case, upper case, symbol. Three lockouts. See IT for unlocking.
  
• For students we don't enforce change at first login as most use their mobile phones and change at first login has proved tricky. We set it to their home post code and birthday, eg b69_4QH07
  
• For staff we force change at first login and give them something simple like Orange23.