Security tips for Zoom

The basics

• All scheduled and instant meetings will have a randomly generated passcode by default. The passcode is embedded in the Join link, so participants do not have to type it in manually.
  
  • Note: Participants can still share the passcode (or URL with the embedded passcode) with unwanted guests. Other security practices must be considered to ensure a secure meeting.
    
• Review your default settings (external link) . If you have changed any default settings in the past, please consider reviewing them to ensure you have at least one of the following security options: a passcode, waiting room, or “Only authenticated users can join meetings”.
  
• Only allow hosts to control screen sharing. Screen sharing is limited to hosts by default. If necessary, you can allow participants to share their screen via the Security toolbar.
  
• Never use your Personal Meeting ID (PMI) for large meetings. Your PMI should only be shared with co-workers or people you communicate with frequently. Once you share your PMI, anyone can try joining the meeting room at any time.

Hosting large meetings

• Have a registration page for larger meetings and events. When registration is on, Zoom creates a “registration link” that you can share instead of the meeting link. Learn more about scheduling a meeting with registration (external link) .
  
• Designate a co-host for your event. A co-host can help admit participants from the Waiting Room and manage other security aspects of your meeting. Learn more about host and co-host controls in a meeting (external link) .
  
• The waiting room feature is good if you have a co-host or smaller meeting. Enabling this option will require you to manually admit participants attempting to join the room.
  
• Never share the meeting link on social media. Only share the meeting link to invited guests using secure, private channels like email.
  

Only allow signed-in users

Limiting your meeting to signed-in or authenticated members of the TMU community is one of the best ways to keep your meetings safe and secure.

When scheduling a meeting, select Require authentication to join. Once checked, "TMU Community" will appear in the dropdown menu. This will require all participants to be signed in using their TMU credentials via Single Sign On (SSO). Please note that selecting “Sign in to Zoom” will require participants to sign in with any Zoom account before joining the meeting. 

Need to invite external guests or people without TMU credentials? Each guest that is invited as an Authentication Exception will receive a unique link permitting them access to the meeting.

Limitations

• This option is not ideal if you are expecting many external participants. 
• You should remind participants in advance to sign-in to the Zoom app with their TMU credentials via Single Sign On (SSO) before the meeting.

During the meeting 

• Get familiar with the Host tools menu. This menu gives you quick access to various security settings.
• Lock the meeting. When you lock a Zoom Meeting that has already started, no new participants can join, even if they have the meeting ID and passcode. Select Lock Meeting from the Security toolbar.
  
• In an emergency, you can pause the meeting. Select Host tools, then select Suspend Participant Activities.
  
• Remove unwanted participants. You can remove someone by finding them in the Participants menu.  
  
• Manage chat settings. If you're the meeting host, you can change the in-meeting chat settings as needed. While in a meeting, select Chat in the meeting controls. Select the More chat options button (ellipses icon) to display in-meeting chat settings.

Host tools

Visible only to hosts and co-hosts, Host tools provide easy access to several existing security features so you can more easily protect your meetings. Detailed information can be found in Zoom's Changing security settings in a Zoom meeting page. (external link) 

In-meeting security settings overview

Related Zoom resources

Other helpful teaching resources