EduPage suspects that your password is guessable or compromised.

What is phishing?
Phishing is a technique where an attacker attempts to trick you into revealing sensitive information – such as passwords and login credentials. The attacker then tries to sell these passwords or uses them to log in and send inappropriate messages to other EduPage users.

This is what phishing might look like:

• You receive an email or message that appears to be from your school or school system (e.g., EduPage).
• The message urges you to "log in urgently" or "reset your password".
• The link in the message leads to a fake website that looks exactly like the original.
• Once you enter your teacher or parent password, the attacker captures it.

Important EduPage Security Rule:

• EduPage will never ask you to provide your original (old) password based on an email or any other message.
• When resetting your password, the process must always be initiated by you. EduPage will then send you an email with a link where you enter only your new password.

Other forms of security risks:

• Third-party apps and services: An attacker may create an app or service and claim you can log in using your EduPage credentials. Never enter your EduPage password into non-official applications.
• You might receive a message via WhatsApp or social media offering to automatically solve EduPage online tests, help with homework or some other problem.
• Weak passwords: If your password is too simple or common, an attacker could easily guess it using automated tools.
• Physical security: A teacher might write their password on a sticky note and leave it on the monitor. This makes the password visible to anyone in the classroom or office.

Has EduPage been hacked? No. Quite the opposite.
Passwords were leaked outside of the EduPage system through phishing. EduPage detected that the password was compromised and proactively reset it as a preventive measure.

How to protect yourself:
Never enter your EduPage password outside of the official EduPage environment.
The best practice is not to type your password at all and log in securely using a QR code.

EduPage also offers two-factor authentication (2FA), which you can enable:
Protect your EduPage account even better with two-factor authentication.

What else should you watch out for?
Do not install suspicious programs or pirated games, avoid clicking on suspicious advertisements. These often lead to the installation of tracking apps (spyware) or other malware on your computer or mobile device.
EduPage - Monitoring and Protection Against Malware

Useful guides for parents:
How a parent can change the password on their child's EduPage account
I forgot the password to my EduPage account, the password doesn't work

Useful guides for schools:
Monitoring of potentially inappropriate message content and AI-based screening of attached images
Protect your EduPage account even better with two-factor authentication.