Cybersecurity Awareness Month

Use Strong Passwords

Introduction

Compromised credentials are the single most common entry point for cyberattacks. Stolen credentials were used as the initial access vector in 22% of all data breaches, and an overwhelming 88% of basic web application attacks involved the use of stolen credentials. Across the United States, school districts encounter an average of 5 cyber incidents per week, threatening sensitive student data and school operations. The K-12 Education sector is heavily targeted and 82% of reporting K-12 school districts experienced cyber threat impacts during a recent reporting period.

Why Password Security Matters for K-12 Employees

• Protecting Confidential Student Data (FERPA Compliance)
• Preventing System-Wide Ransomware Attacks
• Securing Employee Payroll and HR Information
• Stopping Account Takeovers Across Multiple Platforms

Password Best Practices 

1. Make it Long

• Use at least 16 characters to guard against automated password-cracking tools.

2. Make it Random

• Combine UPPER, lower-case letters, numbers, special characters, and spaces.

• Use a passphrase made of 5 to 7 unrelated words (e.g., coffee-Desk-88-stapler-Blue-mountain). Passphrases are easy to memorize on the go without writing them down on a sticky note.

3. Make it Unique

• Use a different password for every work and personal account (e.g., district email, payroll portal, LMS, benefit sites).

• NEVER reuse passwords. If an external site is compromised, a unique password keeps district network infrastructure and student privacy secure.

4. Never Share It

• Never provide your password over the phone or via email.
• Never enter your password into a form access through a link from an email.
• Never share your password with anymore.

Source: (CISA, Verizon Data Breach Investigations Report - 2026, US Department of Education)