Weak and reused passwords continue to be one of the most common ways schools are compromised—often leading to ransomware, system outages, and lost instructional time. In this breakout session, K–12 IT leaders will learn how password-related attacks actually happen in school environments, why many long-standing policies no longer improve security, and what practical changes make the biggest impact today.

Using real-world education breach examples, we’ll examine how compromised credentials are used to access SIS platforms, staff email, VPNs, and vendor systems. You’ll see how attackers leverage massive password databases, why offline attacks are especially dangerous once a district is breached, and what really gets stolen when passwords are improperly stored.

The session translates modern NIST password guidance into clear, actionable steps that work for schools—including what policies to stop enforcing, how to reduce help desk load, and how to improve security without adding friction for teachers and students. We’ll also discuss realistic defenses such as password managers, MFA best practices, and breach monitoring—plus a forward look at passkeys and passwordless authentication and what they mean for the future of K–12 access.

Pre K-12 Educators, Librarians, Media Specialists, Technology Specialists, Curriculum Specialists, Deans, Counselors, Principals, Assistant Principals, District Technology Directors, District Curriculum Directors, District Bilingual/ELL Directors, District GT Directors, District SPED Directors, Computer Technicians, Higher Ed are welcome! *Megabyte districts attend for FREE*

MEGAbyte Service
Technology

TTESS 1.4 Activities
TTESS 2.2 Content Knowledge and Expertise
TTESS 2.3 Communication
TTESS 2.4 Differentiation
TTESS 4.3 Professional Development

...There are no COOPs...