By Kaili Lambe | April 3, 2020 | Advocacy
On April 8, 2020 Zoom announced an update that includes a new security button in the host toolbar making three of the recommendations below easier to implement. You’ll need to have the latest version of the Zoom client in order to use the new toolbar. We’ve made a few updates below to reflect the news.
Chances are you’ve received an invitation in recent weeks to join a virtual gathering using the Zoom platform. And as millions of people have started working, socializing and exercising on a platform originally intended as an enterprise tool, lots of questions about Zoom’s privacy and security have surfaced. Researchers have recently discovered privacy issues and deficiencies, but Zoom has been responsive and worked to resolve a number of them.
While some privacy concerns relate to platform vulnerabilities, others are related to host and participant settings, so here are steps you can take – both as a host and a participant – to help protect your own privacy as well as that of others.
Sign-in and update to the latest version of the Zoom client or app. This will give you access to the meetings that are available to invited participants and ensure that your system has up-to-date security patches. You can also use a browser version of Zoom, but it does not include all the current features so some of these tips may not work.
You can make your meetings password protected to prevent people from guessing your room ID and joining. Free Basic and single licensed Pro accounts now have password protection on by default. Education accounts enrolled in Zoom’s K-12 program cannot turn off password protection.
Use the Waiting Room feature to decide who is allowed into your room, and when. For free Basic accounts, single licensed Pro accounts and K-12 education accounts, a waiting room is enabled by default. Now you can also choose to set up a waiting room after the meeting has begun – just access the setting under the Security icon on the host toolbar.
Don’t use your Personal Meeting ID – especially for events you’re broadly publicizing. That will stop people from trying to enter your personal room at other times. Instead, generate a unique meeting ID by scheduling the meeting. Here's how:
Don’t share Zoom meeting invites or Meeting IDs with anyone you don’t want to join. For added security use the “Lock Meeting” feature under the participants pop-up-box so no one else can join once you have the participants you expect. Now, you can also lock the meeting from the security button in the host toolbar, too. Although if someone has to drop for some reason – or if their internet cuts out – they won’t be able to re-join.
Using the “manage participants” function, you can mute all participants. You should not unmute them again without telling them that’s what you’re doing.
You can stop participants from sharing their screen, or if necessary, stop their video. This is helpful if you’re inviting lots of people you don’t necessarily know so that someone can’t harass you and your participants – a practice now known as “zoombombing.” Control screen share permissions from either the security button or the “share screen” icon in the host toolbar.
You should know that once a video is "stopped," a host does not have the ability to restart the video – that is, a host can revoke permission for a participant to share video, but cannot start video for another person – they can simply send a prompt requesting them to use video.
Decide ahead of time if you will save the chat or record the video of the meeting and make sure all participants have agreed and know how you plan to use that information. Recording and saving chats may have legal implications so make sure you’ve checked into that before enabling these options.
Only allow signed-in users to join, and require them to use the email address they were invited on.
To avoid being caught unaware, or accidentally allowing other participants to overhear a family member who might be talking when you first join a Zoom meeting, turn off the camera and microphone by default. Go to settings and select video then check “Turn off my video when joining a meeting.” Do the same under audio for “Mute microphone when joining a meeting.” That way you can unmute your video and microphone when you’re ready to participate in the meeting.
You can choose when to turn on your video, depending on the culture of the call, and stay muted when not speaking (pro-tip: you can hit the space-bar to temporarily unmute!) Note that if you mute yourself, you are the only one who can unmute, but if a host mutes you, they can also turn your microphone back on.
Try to position yourself so that there’s a blank wall behind you during Zoom calls. If that’s not feasible, you can set up a virtual background to keep your home space private. As Consumer Reports points out, screenshots or recordings from Zoom chats could exist long past your meeting, and there could be numerous reasons you wouldn’t want that glimpse into your home to live on in perpetuity. While this option may not be available on all systems, if it is, you should see three standard Zoom backgrounds. Click here for a Firefox-themed option you can use.
You should know that Zoom chats can be automatically saved and stored, or manually saved by your host. This could potentially include direct chats to another individual on the call. Separately, chats can also be saved along with a Zoom recording and could be visible to many if that recording is shared.
We encourage you to get informed about Zoom’s security and privacy features and read more about what we are doing to advocate for even stronger controls here — especially if you’re an account administrator or can turn off certain functions for an enterprise Zoom subscription.
Here at Mozilla we work to hold companies to account, to make privacy the default, and to ensure strong security standards. Stay tuned for more updates on how to maximize privacy and security when video conferencing.