How do I keep my meeting secure (and avoid “Zoombombing”)?

 

Overview

“Zoom bombing” refers to when an uninvited individual disrupts a Zoom meeting. When you share your meeting link on social media or other public forums, that makes your event public. ANYONE with the link can join your meeting without the right settings.

To help prevent this issue, meeting hosts should implement measures to protect themselves and their meetings. Below is a list of recommendations for keeping your Zoom at UD meeting secure.

Zoom has created a Best Practices for Securing your Virtual Classroom guide.

 

Two options to control meeting access

Option 1: If all meeting attendees are from UD
If all of your meeting attendees are from UD, turn on the authorized authentication setting to best protect your meeting. Participants will need to sign in to Zoom application using their UD credentials to access the meeting.

Option 2: If some meeting attendees are not from UD
If you have any meeting attendees that are from outside of the University, you should NOT turn on the authorized authentication feature or your outside attendees will be unable to join your meeting. Instead, you can enable the waiting room, or set a meeting password.

Note: the documentation is divided up by how you are accessing Zoom (via app or web). You may see slightly different options based on UD’s global settings and the version of your application.

Report an incident

Please report all Zoom bombings by emailing askit@udel.edu or submitting this form.  If emailing, please include your name, your class name and section number, time of incident (best approximation), and Zoom meeting ID.

Incident report form.

Remove an unwanted participant

In the event that your Zoom meeting has an unexpected or disruptive guest, as a meeting host you are able to remove them. They will be blocked from re-entering the meeting.  If you have too many unwanted participants to manage, end your meeting. Do not publish recordings of classes with incidents.

How to remove a participant.

Before a meeting

Scheduling a meeting is the best time to ensure a safe meeting by following these preventive recommendations.

To get started, access your account from the Zoom application.

  1. Enable a waiting room for your meeting. This feature allows the host to control when a participant enters the meeting.
  2. Consider using a meeting password and share it only with the people you want to join your meeting. It can be a simple password that’s easy to remember.  The password could be shared with students as a Canvas Announcement.
  3. Ensure that only the host, co-host, or alternative host can start the Zoom meeting.
    1. How to set a co-host. A co-host can help administer a meeting, such as muting participants or starting/stopping the recording..
    2. How to set an alternative host. An alternative host can start the meeting if your are unable to.
    3. Learn more about host and co-host controls.
  4. Automatically mute attendee microphones and cameras as they join, available through advanced meeting controls when scheduling.
  5. Set a virtual background to protect your privacy. This option may not be available on all devices.
  6. Remind invitees to not post or share the meeting link.

During a meeting

  1. Manage screen sharing and annotation. Participant annotation has been disabled by default.  This can be managed, along with screen sharing, from the control bar within a meeting.
  2. Mute all participants to prevent noise from interrupting a meeting.
  3. Disable participants video to turn off someone’s webcam from being shared.
  4. Remove participants from a meeting who might be unwanted or disruptive.  Removed participants will not be allowed to rejoin the meeting.
  5. Turn off file transfers to prevent files from being uploaded and shared.
  6. Disable private chats to prevent participants from chatting privately.
  7. Consider locking the meeting after all attendees are present. When you lock a Zoom Meeting that’s already started, no new participants can join, even if they have the meeting ID and password (if required).
  8. Consider posting a reminder about University policies.  Faculty may wish to share, at their next class meeting, that students who are found participating in or enabling Zoom bombings will be referred to the Office of Student Conduct. If a student is found responsible for violating policies, they will be sanctioned appropriately.