If you publicly advertise Zoom webinar or meetings (for example, meetings advertised on a College website or social media), here are some steps you can take to secure them:
- Manually manage meeting/webinar registrations and deny anyone without a known email domain (gmail.com, hotmail.com or a recognized .edu). Any automatically approved registrations (which is the default Zoom setting) do not deter this kind of bad actor.
- Edit the meeting or webinar settings to Require authentication to join. This requires all attendees to log into a Zoom account before joining. (Attendees who don’t have one can create a free account.)
- Disable “join from browser” in your account settings. This applies to all meetings or webinars you host and forces everyone to download Zoom client software in order to participate. (Bots tend to use the web browser without authenticating, but so do some humans).
Note that you only need to use these measures when you host public Zoom meetings. Meeting links shared only with known associates are not vulnerable.
If you have any questions or would like help with Zoom settings, please contact the Help Desk on the first floor of Canaday (help@brynmawr.edu, 610-526-7636).