Say 👋 hello to BusyBee, your AI-powered learning & teaching companion for Buzz. Learn more!
As previously announced, we are in the process of updating password security requirements for administrator and teacher accounts in Buzz.
This is a reminder that on July 20, administrators will be required to use a password that meets the new requirements before they can continue signing in.
Administrators should update their passwords if they get a warning
If you see a warning on login that your password does not meet the requirements, you should update your password before July 20th to avoid being required to do so when signing in after that date.
Verify that your password meets the requirements
When updating your password, the system checks whether the new password:
- Meets the required level of password complexity
- Has appeared in known password breach data
Use these indicators and the Tips to create a strong password when changing your password.
Agilix does not require a specific password formula. Users can meet the requirement through length, unpredictability, character variety, or a combination of these.
For additional guidance, review NIST's password tips: How Do I Create a Good Password?
Your new password should show a Strong indicator and include no warnings that the chosen password appears in lists of compromised passwords. If either of these conditions are not met, the password will not be accepted.
What this means if you authenticate to the API system
If you sign users in through the API, or manage passwords programmatically (e.g. Genius SIS, custom automated APIs, etc), this update may affect you. Because these flows don't go through our sign-in UI, the only way to detect a policy failure is by reading the API response.
If you have integrations or automations that use username/password authentication, check these accounts to ensure they can still log in, and update the passwords where necessary.
If a password doesn't meet the requirements when authenticating with the API, the API response returns the following warning or code: PasswordPolicyRequirementsNotMet.
This response includes:
-
problemAttribute- The requirement(s) that the password fails to meet (e.g., compromised orpwnpassword,minimumentropy). -
value- The value the password you've entered has for that requirement. -
minValueormaxValue- The minimum or maximum accepted value for that requirement.
The following calls return these responses:
-
Login3lets you know if your current password meets the requirements when logging in. Learn more -
UpdatePasswordlets you know if your new password meets the requirements when changing your password. Learn more -
FinishPasswordResetlets you know if your new password meets the requirements when resetting your password. Learn more
Increased enforcement for teacher accounts coming in August
In the coming weeks, teachers will begin seeing password reminders when they sign into Buzz or change their password. On August 14, teachers with passwords that don't meet the requirements will be required to update their password before they can continue signing in.
If you see a warning on login that your password does not meet the requirements, you should update your password before August 14 to avoid being required to do so when signing in after that date.
Why we're making this change
Compromised or easy-to-guess passwords can put administrator and teacher accounts at risk. This update helps reduce that risk by preventing the use of passwords that are known to be unsafe or do not meet current security standards. Because students range in age and access needs, student password policy requirements will continue to be managed at the domain level.
Please reach out to Agilix Support with any questions.