Video Gallery

[Edlio Webinar] User Management and Security - Best Practices from the Director of Customer Support

Go to Video Gallery Added Apr 01, 2021 •

Copy this URL:
Embed code:	<iframe class="edlio-embed-player" type="text/html" width="640" height="360" src="//help.edlio.com/apps/embed/?v=314381" frameborder="0" allowfullscreen></iframe> Change dimensions

Go HD

Check out this brief webinar conducted by Edlio's Director of Customer Support, Juan Alvarado, for tips and tricks, as well as best practices for keeping your school site as secure as possible. We take a look at the built-in tools included with your Edlio website that you can use to ensure your site is protected from unwanted attacks.

Show Transcript

alright thank you so much for joining us today on this webinar on security and user management that we will be discussing how you can keep your website to secure from any malicious actors that will be working to gain access to your site if you have any questions during the presentation please drop them in the chat or Q&A box below my colleague Sergio Flores is on hand to answer your questions the first topic I'll be covering today is password security using a strong password password is one of the best methods to secure your site while it's convenient to use a single password that you can remember easily it can also be guessed within seconds by a malicious actor utilizes a computer to cycle through common passwords to gain access as you can see on your screen the password to be displayed are similar but the stronger password contains capital letters a symbol and a number the swing part below password displays how strong the password is considered to be speaking of generating passwords if you need help coming up with a strong password you can use a free generator provided by LastPass at lastpass.com pass dash generator the password generator will make it easy to generate strong secure passwords another thing to recommend is not using the same password across multiple sites or platforms if your login credentials are obtained by a malicious actor the first thing they will do is check your credentials across multiple sites using the same password will make it very easy for them to gain access strong and unique passwords should be created for every site to help keep track of all of me unique passwords we recommend using a password manager which allows you to create strong and unique passwords for every site but requires you to remember only one password to access all of your log-ins there are many password managers out there but two of the most popular ones are one password and LastPass to help ensure your Edlio website remains secure new password requirements have been put in place moving forward all passwords will be will need to contain the following at a minimum be at least 12 characters include at least one number include at least one symbol include at least one uppercase letter not contain your name username or school name not be a commonly used password or dictionary word if your current password does not meet the new requirements a message will appear prompting you to reset your current password which can be easily done by clicking on the reset your password link and following the instructions over the next few weeks all Edlio administrator accounts with weak passwords may be reset by our team and you will be prompted to update your password to meet the new requirements I recommend updating your password as soon as possible you can update your password in a few simple steps in the Edlio admin click on the account link on the top right followed by profile on the profile screen click on the change password link on the password change screen you will need to enter a new password then meets the minimum requirements once a new password is entered click on cannot change password button at the bottom that's it your password is now updated to meet the new requirements besides our standard login option your school IT technology department can also set up integration with Google Office 365 and Active Directory single sign-on platforms once setup users will be able to log into the admin side using their SSO credentials if your school is interested in setting up SSO please reach out to your Client Success Specialist or to our support team for more information a few of the benefits of using single sign-on platforms include allowing your staff to sign into your website admin site using their Google or Office 365 credentials which means one less password for your staff to remember also both Google and Office 365 offer two-factor authentication which adds an additional layer of security and password requirements will follow what is set in the SSO platform please note the districts or schools that use the setup active directory credentials that use common passwords will need to be reset to meet at Edlio's new password requirements changing gears I'm going to cover some best practices when it comes to granting user access to features of your website with security in mind first it is a good idea to limit the number of users with website administrator access while it's convenient to grant user web admin access which gives them access to every feature of your site the more web admins that you have the mark targets malicious actors have to gain full access to your website admin we recommend auditing your users with website admin privileges regularly to ensure only people that need those privileges have them you can easily check who has website admin privileges in your admin by going to the user management screen all users that currently have web admin privileges will be listed at the top please note only the super admin account that is the account with the username of admin can grant or remove website admin privileges if you're not the super admin for your school district you will need to speak with the current super-admin to perform the audit now some users may need access to specific Pages or features of the website those privileges can be easily granted by any website administrator in the edit profile screen let me know you're here nor demo site in the user management screen click on their profile name you want to edit click edit profile scroll down and you will see all of the pages sections and features that can be assigned to a user for example if I wanted to grant access to the new section for this user I will check the box next to the news and announcements and click save moving forward when this user login into the admin site she will only have access to her personal pages and the News feature limiting the features most users have will reduce the exposure a malicious actor is able to access on your it is also a good idea to find accounts for staff they may no longer be with the school which will allow them to login as long as your account remains active you can easily disable an account by go into the account options clicking disable once that's done make sure you go ahead and click save while I'm here in the user management screen let me show you where you can generate a password reset for a user when you click on a user name at the bottom of the screen you will see you a button that says email password reset link clicking the button will generate a password reset email to the user please keep in mind that this will lock out to user until the password is reset this feature is only available to website admins the last couple of topics I'll be covering today our new security enhancements are team's working on you may have already noticed we have added a recaptcha box as an added layer of security it allows it to verify you are the one logging into your account when signing in all you need do is enter your username password and click the box next to the I'm not a robot message please note recaptcha will not be added if your school has set up Google or Office 365 single sign-on the second new feature coming soon is you set up two-factor authentication for your account when active you will be asked to enter a pin code every time you log in the pin code will be provided by an authenticator app on your mobile device that you installed during the setup more information on this feature will be provided soon we hope to launch this enhanced security feature in the very near future well ladies and gentlmen that does it for today's webinar as always we at Edlio are always available to answer any questions you may have on your screen you will find additional resources available to you in case you may need help I want to thank all of you for joining today also want to thank Sergio who has been answering all your questions in the chat a recording of this webinar will be available soon in our help center while on our help center please make sure to take a look at her other upcoming webinar schedules we will leave a chat open for a few minutes to answer any questions you thank you and have a great rest of your day

Listed in My Edlio Webinars

Video Gallery

[Edlio Webinar] User Management and Security - Best Practices from the Director of Customer Support

Popular Videos