Say a new laptop arrives in a box right before the first day of school, and everyone's eager to just start using it. Worth pausing 15 minutes first, though — here's a new school laptop account security checklist that protects the accounts that matter without fighting the school's own setup.
Start with the school's own rules
If the laptop came from the school, follow its setup first — it may already be enrolled in a school management system with required software. Don't remove any of that; it's the school's call, not something to work around at home.
Either way, connect to home Wi-Fi and run all available system and app updates before the first assignment. This is the one step worth doing before anything else, since updates often close security gaps.
Give the school email its own password
The school email is usually the key to everything — assignment portals, password resets, teacher messages. It needs a password that isn't used anywhere else, and neither does the family email that might receive its recovery messages.
A password manager makes this painless — it creates and remembers long unique passwords so nobody has to. CISA recommends exactly this approach for strong passwords. Skip anything guessable, like a mascot or birthday.
Turn on MFA everywhere it's offered
Multi-factor authentication (a second check after the password, like a code or approval prompt) matters most for school email and any account tied to payment info. CISA calls this one of the highest-value security steps anyone can take (turn on MFA).
Look in each account's security settings for "two-step verification" and follow the official instructions. Double-check the recovery email and phone number belong to someone who'll actually keep them current, and save backup codes in a password manager, not a photo on the laptop. For a related check before switching devices, see securing a Google account before changing phones.
Lock the screen, practice signing out
Turn on a PIN or biometric lock with a short auto-lock timer. Have the student practice locking it whenever they step away from the table or library desk — no need to fully sign out for a two-minute break, but definitely before handing the laptop to someone else.
Avoid putting a full name or address on the laptop's exterior if it travels. Keep the serial number and school help-desk contact somewhere safe at home instead.
Keep school and personal accounts apart
Use the school account for school platforms, and the family account for everything else — it keeps files and recovery options from getting tangled, and avoids accidentally uploading a personal file to a classroom service. Some schools require a managed profile for coursework; when in doubt, ask the school's tech office rather than improvising a workaround.
Test it before the first class
With an adult nearby, check three things: can the student sign in and reach the learning portal, does MFA actually work, and can an adult find the recovery method without guessing a password. Fix whatever fails before adding more apps.
The same "review where you're signed in" habit is worth building early — our piece on reviewing ChatGPT active sessions covers the general idea. Revisit this whole checklist at the start of each school year, or any time the laptop or recovery email changes.
Sources
- Cybersecurity and Infrastructure Security Agency: Use strong passwords
- Cybersecurity and Infrastructure Security Agency: Turn on MFA