
Hosts of such meetings should not only be prepared to control 'entry via the door' (using passcodes & waiting rooms), but also behavior of participants once in the meeting. Meetings advertised to the general public on Facebook/social media/websites (regardless of if hosted in Zoom or other platform) are regularly targeted by those seeking to deliberately disrupt and offend. Note that ' Publicly Advertised' meetings carry additional risk.

The indicative timeline for this feature was the end of 2020.īest Practice meetings should be protected by more than just a Meeting ID. Users could choose which, but administrators can set the minimum standard rather than enforcing one or the other. In September, 2020, Zoom announced they are working to enable a control that will allow individual Zoom administrators to enforce a requirement for one, or the other of Passcodes/Waiting Rooms. AARNet recommend the use of a Passcode, or Passcode plus a Waiting Room, as a best practice security element for all meetings. Not having at least one of these two options enabled is like having an always open door.


This is analogous to keeping a closed door on a physical meeting room. All Zoom meetings should have EITHER a Passcode or Waiting Room enabled.
