As digital tools become a core part of education, schools face increasing challenges in protecting sensitive student data. A new global report by Keeper Security, a leader in zero-trust and zero-knowledge cybersecurity, has unveiled critical gaps in school cybersecurity practices. Based on a survey of 6,000 parents and students across nine regions, including Australia, the US, the UK, and Singapore, the “Cybersecurity in Schools” report highlights alarming risks, such as weak passwords, lack of security education, and widespread password reuse.

Parental Trust vs. Reality

The report exposes a stark disconnect between parental confidence and actual cybersecurity measures in schools:

• 74% of parents trust their child’s school to protect their information, yet only 14% of schools mandate security awareness training.
• 21% of parents report receiving guidance on secure password management, despite its importance in combating online threats.
• Weak passwords remain a widespread issue, with 19% of respondents admitting to reusing the same passwords for personal and school accounts.

Darren Guccione, CEO and Co-founder of Keeper Security, emphasizes the urgency:

“Schools play a pivotal role in educating and protecting students, but there is still a significant shortfall in cybersecurity readiness that must be addressed. As digital tools increasingly become embedded in education, schools must prioritize cybersecurity education to protect against evolving threats.”

The Consequences of Cybersecurity Incidents

While only 7% of respondents reported that their child’s school had experienced a cyberattack, the impacts were significant:

• 32% of cases involved data theft.
• 27% of cases resulted in compromised accounts.
• Financial repercussions from these incidents affected both schools and families, further underscoring the stakes of inadequate cybersecurity.

What Schools Are Missing

Key gaps in current school cybersecurity practices include:

• Password Management: Only 9% of schools provide access to password managers, leaving students and staff vulnerable to breaches.
• Cybersecurity Education: A mere 14% of schools require security awareness training, while only 13% offer it as an option.

These statistics highlight a pressing need for schools to invest in both secure technology and education to empower students and staff against cyber threats.

How Families Can Play Their Part

Parents are not just bystanders in their children’s digital safety. Despite 51% of parents expressing concern about cybersecurity in schools, many continue risky practices at home, such as password reuse. Keeper Security recommends families adopt these best practices:

• Use Multi-Factor Authentication (MFA) for all accounts.
• Create secure, unique passwords for every account, ideally at least 16 characters long.
• Educate children about recognizing phishing attempts and online risks.

A Call for Unified Action

To address these challenges, the report calls for a unified approach between schools and families:

• Schools must prioritize cybersecurity education, provide resources like password managers, and implement robust cybersecurity policies.
• Parents should reinforce secure online practices at home and collaborate with schools to raise awareness.

By working together, schools and families can safeguard students in the digital era, ensuring their personal information and online experiences remain secure.