Your Security Matters

Keeping Your ClassroomSafe & Secure

We understand that protecting student and teacher information is essential. Here's how ClassThought keeps your data safe.

Last Updated: October 5, 2026

Security for Teachers

Account and classroom access controls

Password-Protected Accounts

Teacher passwords are managed by our authentication provider using password hashing. Keep your login private and sign out when using a shared device.

Teacher-Managed Student Accounts

Teachers create and manage student accounts. Students cannot create their own accounts. Teacher registration does not require a special educator access code.

Class Access Control

For classroom sign-in, students use the class code plus their teacher-managed username and password, or a login card provided by their teacher. A class code alone does not create a student account.

Separated Data Storage

Class membership and database access rules are used to restrict classroom data. Teaching-team features allow authorized co-teachers to access shared classes and student information.

Security for Students

Simple access for students while keeping their work and information protected

Classroom Login

Students use teacher-managed classroom credentials; they do not need a personal email address to sign in. Classroom passwords should not be reused for other services.

Session Expiry & Sign-Out

On the website, a student session ends 12 hours after sign-in, so a shared classroom device does not stay signed in to a student's account into the next school day. In the mobile app, typically on a family device, sessions last up to 30 days. Students should still sign out when finished on a shared device.

Private Annotations

Student work and annotations are private by default to the student and authorized teachers. Class discussion and explicitly shared materials have different visibility settings.

Class-Only Visibility

Class discussion is organized by class membership and controlled by the teacher. Student work is not automatically shared with classmates.

How We Protect Your Data

We take data protection seriously. Your information and your students' work are safeguarded with multiple layers of protection.

All data is stored on secure, industry-standard cloud servers
Teacher passwords are stored as hashes by our authentication provider, not in readable form
Student classroom passwords are stored as a salted one-way hash (scrypt), which sign-in checks, and as an encrypted copy (AES-256-GCM) under a server-side encryption key, backed up separately, so managing teachers and authorized teaching-team co-teachers can retrieve them for classroom login cards
Readable copies of student classroom passwords were removed from our live student records on October 4, 2026; copies in earlier backups, exports, or logs are not changed by that removal, and their retention and deletion are handled separately
Browser-level database access cannot read or write stored student password data directly; authorized teachers retrieve passwords through our servers
Repeated failed student sign-in attempts are rate-limited
Two-step verification is enabled for the owner accounts used to administer our hosting, database, source code, and encryption-key backup. This applies to administrative accounts only; teachers and students sign in to ClassThought as usual
We do not sell personal information. Service providers process information to operate the platform, as described in our Privacy Policy and Sub-Processor List
File uploads are stored securely and accessible only to authorized users
Database access rules are designed to restrict access to authorized users
We review security controls and release updates as issues are identified; no system can guarantee absolute security

See Privacy Policy Section 6.2 for student password storage and teacher access, and our Sub-Processor List for service-provider disclosures.

Secure Infrastructure

Hosted on trusted cloud servers

Access Controls

Designed so only authorized users see your data

Data Separation

Your class data stays isolated

Have Security Questions?

We're happy to answer any questions about how we protect your information. Reach out to us anytime.

Back to Home

ClassThought

Features PlansAbout