Information Security for Students
Protect your CSUN account, personal information, devices, and coursework with practical cybersecurity guidance for students.
Use this page to learn how to protect your account, recognize scams, secure your devices and information, and respond if something goes wrong.
Quick links:
Start With These Security Basics
A few habits can prevent many common security problems:
- Use a unique password for your CSUN account.
- Use Duo Multi-Factor Authentication when prompted.
- Never share your password or Duo verification code.
- Be cautious with unexpected emails, texts, attachments, links, and QR codes.
- Keep your laptop, phone, browser, and apps updated.
- Download software only from trusted sources.
- Lock your device when you step away.
- Use trusted Wi-Fi networks.
- Back up important coursework and personal files.
- Report suspicious messages or possible account compromise promptly.
Protect Your CSUN Account
Your CSUN password should be known only to you.
To protect your account:
- use a unique password for your CSUN account;
- never share your password with friends, roommates, family members, classmates, or anyone claiming to be from CSUN;
- do not enter your password after following an unexpected email, text-message, or QR-code link;
- verify that you are on a legitimate CSUN sign-in page before entering your credentials; and
- change your password immediately if you think someone else may know it.
CSUN will never ask you to send your password by email.
Duo Multi-Factor Authentication adds another verification step when you sign in to protected CSUN services.
Duo helps protect your account even if someone obtains your password.
When using Duo:
- approve only sign-in requests you initiated;
- never give another person your Duo verification code;
- reject unexpected Duo requests; and
- take unexpected or repeated approval requests seriously.
An unexpected Duo request may mean that someone has your password.
If you receive one, reject the request and change your CSUN password.
Watch for Scams Targeting Students
Students are frequently targeted by scams designed to steal passwords, money, or personal information.
Be especially cautious of:
- fake jobs and internships offering high pay, little work, or no real interview;
- messages impersonating a professor, supervisor, or university employee;
- requests to purchase gift cards and send the codes;
- QR codes that lead to fake CSUN, Microsoft, or Duo sign-in pages;
- unexpected Duo or MFA approval requests;
- text messages asking you to follow a link or provide personal information;
- requests to deposit a check and send some of the money elsewhere;
- requests for cryptocurrency; and
- threatening or embarrassing messages demanding payment.
A message can look professional, use a CSUN logo, or contain the name of a real professor and still be fraudulent.
Protect Yourself from Phishing and Cyber Threats
See Examples of Phishing Reported at CSUN
Before You Click
When a message asks you to take action, ask yourself:
- Was I expecting this message?
- Does the sender's actual email address match who they claim to be?
- Is someone asking for my password, Duo code, money, gift cards, or personal information?
- Is the message pressuring me to act immediately?
- Does the link or QR code lead where the message claims?
- Can I verify the request another way?
If something seems unusual, stop and verify before responding.
If You Receive a Suspicious Message
Stop. Verify. Report.
If you receive a suspicious email, text, or other message:
- Do not click suspicious links.
- Do not scan unexpected QR codes.
- Do not open unknown attachments.
- Do not approve unexpected Duo requests.
- Do not send passwords, verification codes, gift-card codes, money, or banking information.
- Verify unusual requests using another trusted method.
- Report suspicious email to abuse@csun.edu.
When possible, send a suspicious email as an attachment so CSUN Information Security can review the original message and its technical information.
If You Already Entered Your Password
If you entered your CSUN username and password on a suspicious website:
- Change your CSUN password immediately.
- Reject Duo requests you did not initiate.
- Contact CSUN Information Security or the IT Help Center.
Protect Your Devices and Files
Protect your laptop, phone, and tablet by:
- installing operating-system and application updates;
- enabling automatic updates when appropriate;
- using a screen lock, PIN, password, or biometric security;
- locking your device when you step away;
- installing software only from trusted sources;
- avoiding unknown browser extensions and downloads; and
- keeping important files backed up.
Security updates often fix vulnerabilities that attackers can use to compromise your device.
Use trusted internet connections whenever possible.
When using public networks:
- confirm you are connecting to the correct network;
- avoid sensitive activity on unknown public Wi-Fi when possible;
- turn off automatic connection to unknown networks;
- do not leave devices unattended; and
- use CSUN-supported secure access services when required.
Be cautious with unknown USB charging ports, cables, and devices.
Protect Your Personal and Academic Information
| Information | Recommended Practice | Why It Matters |
|---|---|---|
| CSUN Credentials | Keep your password and Duo codes private | Protects your university account |
| Banking Information | Do not provide it in response to unexpected job or payment requests | Helps prevent financial fraud |
| Social Security Number | Share only when required through a legitimate, trusted process | Reduces identity-theft risk |
| Coursework | Back up important assignments and files | Helps prevent loss |
| Student Records | Protect documents containing grades or other academic information | Helps preserve your privacy |
| Zoom Meetings | Do not publicly share restricted course meeting information | Helps prevent unauthorized access |
| Personal Devices | Use screen locks, updates, and secure configuration | Helps protect your files and accounts |
Protect Against Malware and Ransomware
Malware is software designed to damage a device, steal information, or gain unauthorized access.
Ransomware is malware that can lock your device or encrypt your files and demand payment.
Reduce your risk by:
- keeping your devices updated;
- avoiding suspicious links and attachments;
- downloading software only from trusted sources;
- backing up important files; and
- treating unexpected security warnings and downloads cautiously.
If you suspect ransomware or another serious malware infection:
- Stop using the affected device.
- Disconnect it from Wi-Fi or other networks when it is safe to do so.
- Do not pay a ransom.
- Avoid deleting files or performing extensive troubleshooting on your own.
- Contact the IT Help Center or Information Security.
Protect Yourself from Fake Jobs and Financial Scams
Be cautious when a job or internship:
- promises unusually high pay for very little work;
- requires no real interview;
- asks you to communicate only through text or a personal email account;
- asks you to purchase equipment or gift cards;
- sends you a check and asks you to send part of the money elsewhere;
- asks for banking information before a legitimate hiring process has occurred; or
- asks you to pay money to obtain the position.
You should not have to pay someone to receive an internship or campus job.
Verify suspicious opportunities through official university or employer channels before providing personal or financial information.
Scammers may impersonate professors, supervisors, department chairs, or other university employees.
A common scam begins with a short message asking whether you are available, followed by a request to buy gift cards, send money, or provide personal information.
If a request is unusual:
- Stop communicating through the suspicious message.
- Look up the person's official CSUN contact information.
- Contact the person separately to verify the request.
Do not rely on the displayed sender name alone.
A scammer may send you a check and ask you to:
- deposit it;
- keep part of the money; and
- send the remaining money somewhere else.
The check may appear to clear initially but later be identified as fraudulent. You may then be responsible for the money you sent.
Do not send money from a deposited check to someone you do not know and trust.
FERPA and Your Student Records
The Family Educational Rights and Privacy Act (FERPA) protects the privacy of student education records.
CSUN generally may not disclose personally identifiable information from your education records without your consent, subject to applicable FERPA exceptions.
Students also have rights related to accessing their education records and the release of directory information.
For authoritative information about your FERPA rights and student records, review CSUN's official student-records policy.
Review CSUN Privacy Rights of Students in Education Records
Copyright and File Sharing
Copyright law applies to music, movies, software, books, images, and other creative works.
Do not download, copy, share, or distribute copyrighted material unless you have permission or another lawful basis to do so.
Using peer-to-peer or other file-sharing services to distribute copyrighted works without authorization may violate copyright law and university policy.
Review CSUN Information Security Resources
Secure Your Zoom Meetings
For classes, study groups, student organizations, and other restricted Zoom meetings:
- share meeting information only with intended participants;
- do not publicly post restricted meeting links or passcodes;
- review participant and screen-sharing permissions;
- remove disruptive or unauthorized participants when necessary; and
- protect access to recordings.
Review CSUN Zoom Security Practices
Security Awareness Training
Student employees may be required to complete Information Security Awareness training as part of their university employment.
Complete assigned security and privacy training by the required deadline.
Students who are not employees can use CSUN's Information Security resources to learn how to protect their accounts, devices, and personal information.
Visit CSUN Information Security
Student Security Checklist
Use these practices regularly:
- Keep your CSUN password private.
- Approve Duo requests only when you are signing in.
- Verify unexpected emails, texts, links, and QR codes.
- Be skeptical of unusually easy or high-paying job offers.
- Never send gift-card codes or money in response to an unexpected request.
- Keep your devices and software updated.
- Lock your devices when you step away.
- Back up important coursework.
- Protect personal and academic information.
- Report suspicious activity promptly.
Need Help?
IT Help Center
Contact the IT Help Center for assistance with:
- passwords;
- Duo;
- account access;
- software;
- device troubleshooting; and
- other technology issues.
Phone: (818) 677-1400
Information Security
Contact Information Security for:
- phishing and suspicious messages;
- suspected account compromise;
- malware or ransomware;
- possible data exposure; and
- other security concerns.
Phone: (818) 677-6100
Email: iso@csun.edu
Report suspicious email: abuse@csun.edu