Device Security Standards#
All personal devices, including laptops, cellphones, tablets, smartwatches, and similar devices, must be protected with a password, PIN, biometric lock, or other appropriate unlock method where supported.
For Kidcave devices, a four-digit PIN is acceptable. However, devices may not rely only on swipe-to-unlock or any unlock method that does not require a secret, biometric factor, or approved authentication method. PIN codes should not be shared across all children. A single child may use the same PIN across two or more of their own devices when appropriate.
Passwords for standard user accounts should be at least 8 characters long and should use a reasonable degree of complexity. Where possible, passwords should not be reused across unrelated accounts or services.
A password manager should be used to store complex passwords and reduce the risk of password reuse. LastPass is the current password manager in use as of 10/13/2025.
USB debugging, developer mode, or similar elevated device-access features should remain disabled during normal device operation unless temporarily required for maintenance or troubleshooting.
Child/Kidcave devices should have an installed, functional, and actively used virus protection or threat intelligence solution. Norton 360 is the current solution in use as of 10/13/2025.
Screen timeout settings should be configured to lock devices automatically after no more than 5 minutes of inactivity.
Devices should have location services enabled where appropriate, including precise location when supported. Devices should also remain reachable through the applicable cloud account or management service to improve the chances of locating, locking, or wiping the device if it is lost or stolen.
When not in use, devices should be charged or charging, especially overnight. This helps ensure devices are ready for use the next day and improves the chance that a lost or stolen device can be located, contacted, locked, or wiped.
Devices should be stored in the owner’s room or connected to the central charging station in the living room when not in use. This reduces the risk of accidental damage, loss, unauthorized access, or malicious data scraping by visitors.
Computers should be powered off, locked, or placed into sleep mode when not in use.
Kidcave devices should have a centralized management solution enabled where supported. Google Family Link is an example of an acceptable solution. Centralized management should be used to monitor or enforce applicable device security, screen time, location, and account settings.
Devices connecting to open or untrusted Wi-Fi networks should use a VPN. When possible, the preferred VPN should connect directly back to the home network.
All Kidcave devices should connect to the Kidcave VLAN, VLAN ID 20. Wireless Kidcave devices should be manually assigned to the correct network or configured with a virtual network override where necessary to ensure proper VLAN placement.