Security

Protecting access

The cloud student portal uses HTTPS and browser security policies. Passwords are stored as salted hashes rather than readable passwords. Staff features require authorized accounts, and recorded administrative actions can be reviewed in restricted logs.

These controls are not a guarantee against every attack. A security-header grade assesses browser configuration, not the safety of all application logic, devices or stored data.

Protect your account and pass

Use a strong, unique password. Check the site address before signing in. Do not share verification codes, private pass links or recovery codes. Sign out on shared devices and avoid saving sensitive documents on them.

Report a security concern

Report suspected unauthorized access or a vulnerability privately to campus security or the project administrator. Include the affected page, time and a brief description, without passwords, tokens, ID images or other people's personal data.

Do not attack live services, access another person's records or publish sensitive evidence. Security testing requires permission and should use a separate test environment.