Security Tips for Students

Securing your VCU accounts and your personally-owned devices is a critical step in preparing to take classes. To get started, we've provided a list of resources here however this is by no means an exhaustive list. 

VCU Information Technology Policies, Standards, Baselines and Guidelines, and General Information Security

In addition these recommendations, ALL students at VCU regardless of their current enrollment status are required to comply with the following policies highlighted below. We strongly encourage ALL students at VCU to review these policies.

Protect Your Password! 

Your eID password is your access to all VCU resources. Never share your password with anyone! No VCU official will ever ask for your password in an email. Learn more about protecting your information and devices at

Sign up for the Self-service Password Reset Tool. This tool allows you to reset your password when it expires 24/7. Visit for more details.

Rise in Job Scams Targeting Students

Scammers are targeting students with unsuspecting job opportunities which lead to victims loosing thousands of dollars. Read more about Job Scams here.  

Phishing Scams

The beginning of a sophisticated cyber-attack usually starts with a phishing scam. A phishing scam is a social engineering attack that utilizes phone calls, email, social media, or a text message to trick a victim into disclosing information that he or she would typically not disclose. The end goal of phishing scams is usually the theft of login credentials such as usernames and passwords. Armed with the username and password of an individual, a cyber adversary can then masquerade as the victim, steal his or her personal information protected by those credentials.

Please be aware of "job offer" and "money transfer" scams targeting students. No legit company will hire people through emails and without an Interview; if a deal sounds too good to be true, then it probably is a scam. Please visit our information to learn how to protect yourself from phishing about scams.
Please report actual or suspected phishing attempts and scams to the Information Technology Service Center at, 804-828-2227, or directly to the Information Security Office at

Downloading Using the VCU Network

Illegal downloading using the VCU Network — including the wireless network — is not only against VCU policy but is also unlawful. Large media companies such as FOX, Universal, Paramount, and HBO monitor this illegal activity. Users should pay for their content to avoid conduct and legal issues. Visit our webpage for more information. 

Duo 2-factor Authentication

VCU is enhancing its security systems to protect the University community from cybercriminals. Students and employees at VCU are now required to use Duo 2-factor authentication when signing-in to services. For more information, please visit our VCU Duo 2-factor page.

Protecting Your Personal Devices

How do I protect my devices? Discover additional information for using anti-virus protection for your personal devices.

Other Security Tips

Visit the Security Awareness and Training site for more tips on how to protect yourself and your identity.