Passwords and Account Security

Passwords are the first line of defense for your account and district data. A strong password protects not only your information but also the privacy of our students and staff. Weak or reused passwords are one of the most common ways hackers gain access to accounts.

As we transition to Multi-Factor Authentication (MFA), having a secure password is more important than ever—it’s the foundation of your digital security.

💡 What Makes a Strong Password

A strong password is long, unique, and difficult to guess.
When creating or updating your password, keep these tips in mind:

✅ Tips for creating strong passwords:

Use at least 12 characters — the longer, the better.
Include uppercase and lowercase letters, numbers, and symbols.
Avoid personal details like birthdays, pet names, or school mascots.
Never reuse passwords across different accounts.
Try using a passphrase instead of a single word — something memorable but random.

📘 Example:

PurpleCloudsRunFast! or BookstoreDreamsAtNoon22

🚫 What to Avoid

❌ Common weak passwords: Password1, Welcome123, abc123, VacavilleUSD!, Creation20, Creation21.

❌ Writing passwords on sticky notes or keeping them on your desk

❌ Sharing your password

❌ Reusing passwords between work and personal accounts

❌ Using the same password with only a small change—like adding a different symbol (!, $, or #) at the end each time

🧭 When to Update Your Password

Regular updates keep your accounts safe and reduce the risk of compromise.

🔁 Change your password immediately if:

You suspect someone may know it.
You receive a district alert about unusual account activity.
You accidentally entered it on a suspicious site.
You recently experienced a phishing attempt or breach.

💬 Pro Tip: Update your passwords at least once a year — or more often for critical accounts like email and Google Workspace.

🚨 What To Do If You Think Your Account Was Compromised

Change your password immediately.
Notify the Technology Department right away so they can check for suspicious activity.
Do not click on any unexpected links or attachments in your inbox.