Keeping Your School Account Safe

Keeping Your School Account Safe

Important information for students and parents
Every student is given a school Microsoft account to support learning, communication, and access to school systems. Keeping this account safe is very important for the student, the school, and the wider community.
This article explains what can happen if an account is compromised, what the school may do to protect others, and what students and parents need to do.
What does “account compromised” mean?
A Microsoft account is compromised when someone else gains access without permission.
This usually happens when:
  • A student clicks a fake login link in an email or message
  • A password is shared with others
  • The same password is used on non‑school websites or games
Once attackers gain access, they can pretend to be the student.
Why compromised accounts are risky
If a school account is compromised, attackers may:
  • Send spam or scam emails to many people
  • Send phishing emails pretending to be the student
  • Try to trick others into giving personal or financial information
  • Disrupt school systems or learning tools
Even one compromised account can affect many other people, which is why quick action is necessary.
What the school IT team may do to protect others
When suspicious activity is detected, the school IT team may take immediate steps to protect the community, including:
  • Restricting sign‑in to the account
  • Forcing a password reset
  • Temporarily limiting the account’s ability to send email
  • Reviewing recent activity for safety
These actions are protective, not disciplinary, and are taken to prevent further misuse.
Why you may be asked to reset your password
If an account shows unusual behaviour, the safest action is to:
  • Stop access immediately
  • Require the password to be changed
This helps:
  • Lock out attackers
  • Restore the account safely
  • Prevent further harm
Extra protection when logging in from overseas
The school will enable extra security checks when an account is used outside Australia or New Zealand.
If a login is detected from another country:
  • An extra verification step (Multi‑Factor Authentication, or MFA) will be required
This helps protect accounts if passwords are stolen.
Registering for Self‑Service Password Reset (important)
To make account recovery easier, students must register for Self‑Service Password Reset (SSPR) in Microsoft.
This allows students to:
  • Reset their own password safely
  • Complete extra verification when required
What to use for verification
Because students do not bring phones to school, we recommend using:
  • ✅ A parent or caregiver email address, and/or
  • ✅ A parent or caregiver mobile phone number
This information is used only for security verification.
How to register for Self‑Service Password Reset
  1. Go to:
    https://aka.ms/ssprsetup
  2. Sign in with the student’s school Microsoft account
  3. Add:
    • A parent/caregiver email address
    • A parent/caregiver mobile number
  4. Save the details
This only needs to be done once, unless details change.
How students can help keep their account safe
Students should:
  • Never share their school password
  • Only sign in on official Microsoft pages
  • Be cautious of emails asking them to “verify” or “reset” their account
  • Report suspicious emails or login messages to a teacher or IT staff
How parents can help
Parents can help by:
  • Talking with students about online scams and phishing
  • Encouraging students to ask before clicking links
  • Helping with Self‑Service Password Reset registration
Working together to stay safe
Online safety is a shared responsibility.
By working together — students, parents, and the school — we can keep accounts secure and learning systems reliable.
If you have questions or concerns about account security, please contact the school IT team.

    • Related Articles

    • Change school account password

      Note: This only applies to students and staff. We don't and no longer manage caregiver's passwords. This is instruction to change password. If you forgot your password and want to reset, please use another help article. Change password You can only ...

    • Connect to school Wi-Fi

      We have the following Wi-Fi SSID available: SSID Users Credentials required Notes pinehurst-BYOD Staff and Student BYOD devices Username (or email address) and password School logins only pinehurst-Internal School devices, staff BYOD devices Username ...

    • Offboarding: Backing Up Your School Files

      As you prepare to leave the school, it's important to back up any personal or academic files you've stored in your school Microsoft 365 account. This guide will walk you through how to save your files from OneDrive, Teams, and OneNote before your ...

    • Adding Alternate Sign‑In and Account Recovery Methods

      Purpose To keep student Microsoft school accounts secure and to reduce the need for IT assistance when passwords are forgotten, students are required to set up at least one alternate sign‑in or recovery method on their school account. These methods ...

    • Print and copy service at school

      BYOD Find Me Printer What is Find-Me printing? Simply, it’s the ability for teachers and students to send their print jobs to a single print queue from their computer or device, and release their jobs from whichever printer they’re close to, whenever ...