Note: As our world comes together to slow the spread of COVID-19 pandemic, the Zoom Support Center has continued to operate 24x7 globally to support you. Please see the updated Support Guidelines during these unprecedented times.



May 2020: Updated password and security settings Follow

Overview

To provide additional security and privacy for Zoom meetings and webinars, we are updating our default password settings for all account types. Zoom will require passwords for meetings and webinars, including previously scheduled events. In addition to passwords, we are also making the below changes:

  • Waiting Room will be enabled by default for the Personal Meeting ID for all account types.
  • Screen sharing will be limited to 'Host only' by default for Basic accounts.

These changes will take effect on May 9th, 2020 for all free/basic accounts. The strategy for Pro, API, Business, Education, and Enterprise accounts is being evaluated. (It was previously stated as taking effect on May 30th, 2020. Based on customer feedback we have decided to delay this and re-evaluate.) 

This article covers:

Changes to settings

Passwords for Meetings and Webinars

As a part of the password changes, the following settings will be enforced for all meetings. Due to this change, the settings will be removed from the web portal, and will be a required setting when scheduling:

  • Require a password for Personal Meeting ID (PMI)
  • Require a password when scheduling new meetings
  • Require a password for instant meetings
  • Require password for participants joining by phone
  • Require passwords for Zoom Room meetings

While the password is required, it can still be set by the host or there is the option to have it randomly generated automatically. These changes are being made to prevent unwanted participants from joining your meeting or webinar.

If you do not already have passwords set for your currently scheduled meetings or webinars before this change takes effect, we recommend deleting the existing meeting and scheduling a new meeting and re-sending the invite to your participants.

Manually entering a meeting/webinar ID will always prompt the user to enter the password. By default, Zoom embeds the password into meeting/webinar links, if participants click the link they will not be prompted to enter a password when joining. However, you can disable this setting at the account, group, or user level by turning off the setting Embed password in-meeting link for one-click join.

Screen sharing

For free accounts, screen sharing will be set to host only by default. This is to ensure security during the meeting and remove potential disruption. The host, however, can still allow participants to screen share from the meeting controls, or change the default behavior from the web portal. However, we recommend leaving screen sharing to “host only”.

 

Waiting Room

Zoom is also enabling the Waiting Room feature by default for Personal Meeting rooms (PMI). Waiting Room allows the host to control when a participant joins the meeting. Waiting Room is one of the best ways to control who’s entering your Zoom meeting by giving you the option to admit participants individually or all at once. We highly recommend using this feature to secure your meetings and prevent unwanted participants if a link is shared outside of the intended participants. Learn more about Waiting Room.

Frequently Asked Questions

How will this affect participants joining my meetings?
This change will not affect participants who join by clicking the meeting or webinar link with a password embedded, or through the desktop calendar integration if you send the new invitation with the meeting password. Participants who join by manually entering the meeting ID will need to enter the password manually as well.

Where can I find the meeting password as the host or alternative host?
For scheduled meetings, the meeting password will be in the invitation. The password will be available as well on the meeting details page itself (accessible by the host only). The password is also included in the meeting join URL and invitation sent to the alternative host when they are assigned to the meeting.

For instant meetings, the password will be displayed in the Zoom Client in the invite section of the participant controls.

Where do I find the meeting password as an invitee?
As an invitee, the password can be found in the invitation sent to you by the host. The join link will also have the password embedded in it if the host chooses to have it embedded.

If you do not see a password in the invite, please contact the host for the updated invite, or password information.

Can I apply passwords in advance for my existing meetings before the change takes place?
Yes, you can edit your currently scheduled meetings, and add passwords to your existing scheduled meetings before the change takes place. This will also need to be done with your Personal Meeting Room, if you do not have a password required. This will minimize any potential disruption to your scheduled meetings, after the change. Learn more about adding passwords to meetings and webinars.

This will also need to be done for Personal Audio Conferences as well (PAC) if you utilize those as well. Learn more about adding passwords to PAC meetings.

Can I apply passwords in advance for my new meetings before this change takes place?
Yes, when scheduling a new meeting you can add a password to the meeting or webinar. If the meeting is scheduled for after the change, the password set when scheduling will be used still. Learn more about scheduling meetings.

How will this affect my Zoom Rooms?
For paid accounts that utilize Zoom Rooms (software-based conference room systems), the Zoom Room will automatically detect the meeting password in a calendar invite and enter it when joining. Participants joining from a room with an older version of Zoom Rooms or entering the meeting ID manually will need to enter the password manually. Instant meetings started from the Zoom Room will require participants to enter a password when entering the meeting ID manually as well.

How will this affect participants dialing in by phone?
With these changes, participants that join via phone will have to enter a numeric password before entering the meeting.

For scheduled meetings, including meetings using Personal Meeting Room IDs (PMI) or using Personal Audio Conferences (PAC), the meeting invitation will contain a numeric password for participants joining via phone, within the dial-in information.

For users that join scheduled meetings from a Zoom client by clicking the join link and choosing to dial-in via phone for audio, the phone password will be in the dial-in information under the Phone Call tab of the Join Audio option in the meeting controls. During the audio prompts, when prompted for the password, enter the password followed by #.

For instant meetings using your PAC account or PMI, the host will need to send the phone password to participants. We recommend retrieving the password by clicking the “copy invitation for participants” link in the Personal Audio Conferencing section of your account, or within the Personal Meeting Room tab within the Meetings section of your account. 

How will this affect H.323/SIP devices joining by Conference Room Connector or Zoom Connector for Cisco and Polycom?
Devices configured with Zoom Connector for Cisco and Polycom will automatically detect the meeting password in a calendar invite and enter it when joining. For participants dialing in manually from an H.323 or SIP device, they will need to include the password in the dial string or enter it manually after dialing into the Zoom meeting. Any instant meetings started by a H.323/SIP endpoint using the Polycom/Cisco room connector will also have passwords set for those meetings.

How will this effect screen sharing for my participants?
For free accounts, while by default screen sharing will be set to the host only, participant screen sharing can be enabled or disabled completely. For paid accounts, the current screen sharing settings will not be changed.

How will this affect current integrations?
Because password settings will no longer be able to be disabled within account settings, meetings that were previously scheduled will require a password to join. While the host can still launch a meeting using the start_url, attendees will not be able to join using the join_url, without a password. For more information on how this change will affect API, Web SDK, and Chatbot/Marketplace apps, and the actions need to be taken to ensure integration functionality, please see our developer blog post regarding the change.