One of the main features that makes Zoom meetings so easy to use is the ability for users to freely join meetings without having to have a Zoom account. While this is a helpful and convenient feature in most cases, it can also present challenges such as "Zoom Bombing." To help protect Zoom classes, meetings, and other online events from these disruptions, we strongly recommend the use of the following best practices to secure your classes, meetings, and events.
For Faculty Using Zoom for Class Meetings
- Always log in to Zoom as the host of your own meeting
- While this may sound automatic, it is imperative to make sure that you actually are logged in with your Lehigh credentials when hosting a meeting to be sure that you actually have the role of host and the permissions that go with this role. The best ways to ensure this is to first log in to the Zoom client (if already installed on your device) or log in directly at https://lehigh.zoom.us and then select the current meeting you want to start as the host.
- Require a passcode to access your meeting
- This is the default security setting in place for any new Zoom meeting that you create. You can choose to use the default passcode or use either of the options detailed above. A passcode can also be added to any meeting that you have already scheduled and use on an ongoing basis. A passcode is embedded into the meeting link. You only need to share the passcode to your audience, if you share the meeting ID instead of the link.
- Require users to log in (authenticate) to join Zoom meeting
- When you schedule a new Zoom session, use the "Require Authentication to Join" setting available in the "Security" settings area. You can edit and add the "Require Authentication to Join" requirement to any meeting that you have already scheduled and use on an ongoing basis. An authenticated user is anyone who has a verified Zoom account - they do not have to have a Lehigh-specific Zoom account.
- Use a waiting room
- When you schedule a new Zoom session, use the "Waiting Room" setting available in the "Security" settings area. A waiting room can also be added to any meeting that you have already scheduled and use on an ongoing basis. If you make use of the waiting room, you will need to monitor it throughout your class to admit anyone that arrives late or who may have left the session or then return.
For University Meetings
The same guidelines as listed above apply when you set up a meeting with colleagues using your Zoom account through https://lehigh.zoom.us or using the Zoom client.
For University Events
Require participants to register for your meeting
- When you schedule a new Zoom meeting, choose to require registration. This will allow your to collect names, email addresses, and other information about your event attendees and give you a sense of how many people will attend. See additional documentation on Using registration for meetings.
Use a waiting room
- When you schedule a new Zoom session, use the "Waiting Room" setting available in the "Security" settings area. A waiting room can also be added to any meeting that you have already scheduled and use on an ongoing basis. If you make use of the waiting room, you will need to monitor it throughout your class to admit anyone that arrives late or who may have left the session or then return.
Hold your event using a Zoom webinar rather than a Zoom meeting
- Zoom webinars allow event panelists and hosts to share their audio and video, while event attendees watch, listen, and interact through either text chat or Q&A limiting the ability of any attendee to disrupt your event. Lehigh has a limited number of webinar licenses that can be assigned to a user account for a specific event or timeframe. To request a license be assigned to your account, please submit a ticket to the Instructional Technology Team at go.lehigh.edu/help.
Avoid posting meeting links (URLs) publicly
It is strongly recommended that you only share your Zoom meeting link with intended participants. This means avoiding sharing your Zoom meeting links on public web sites and social media. Instead share your meeting links via secure web sites behind authentication, such as your Course Site course, and directly with participants via email.
You may share your meeting ID publicly if password protected and you do not post the password.
Keep Your Zoom Client Current
Please update your Zoom client regularly as new security and privacy features are always being added.