In 2020, schools and tutoring centres around the world moved online in a matter of weeks. As video platforms became the default classroom, a new problem emerged: uninvited strangers crashing lessons, disrupting students, and in some cases sharing offensive material. The phenomenon became known as Zoombombing, and it highlighted a fundamental weakness in how most video platforms handle access control.
While many platforms have since added waiting rooms and passcodes, these measures are add-ons to a system built around shareable meeting links. For teachers running sensitive group work, working with minors, or simply trying to create a safe learning environment, there is a better design: platforms where access is controlled by account and course enrolment, not a URL that can be leaked, forwarded, or posted online.
Why Meeting Links Create Risk
Most popular video platforms—Zoom, Microsoft Teams, Google Meet—were designed for business meetings, not classrooms. When you schedule a session, the platform generates a shareable link or dial-in code. Anyone with that link can attempt to join, and controlling who enters becomes a matter of policing the perimeter with passwords, waiting rooms, and lock settings.
The problem is that links leak. Students screenshot them, forward them to friends, or post them in group chats. Parents share links with siblings. A link pasted into the wrong place can circulate far beyond your intended group. Once a link is out in the world, you lose control over who sees it—and who tries to use it.
Even with a waiting room, the teacher must review and admit every arrival. If a session is large, or if students trickle in late, this becomes a constant interruption. And if an uninvited person does get in, they can disrupt the session before you notice and remove them.
The Alternative: Account-Based Access
A fundamentally different approach is to grant access based on identity, not possession of a URL. Platforms designed for education—like Simpleclass—use account and course enrolment to decide who can join a session. There is no meeting link to share. Students log in with their own credentials, and the system checks whether they are enrolled in the course. If they are, they see the session and can join. If not, they don't.
This architecture eliminates the Zoombombing problem at its source. There is nothing to leak, forward, or post online. Access is tied to membership, and membership is controlled by the teacher or institution, not by who happens to have a URL.
For tutoring centres and language schools, this design also simplifies onboarding. You invite students once, enrol them in their courses, and from then on they log in to see their own schedule. No need to send calendar invites with fresh links every week, or worry about links being shared outside your group.
Breakout Rooms Need Extra Protection
Zoombombing is not the only safety concern in online teaching. Many lessons involve breakout rooms, where small groups of students work together without the teacher present in the room. This creates a supervision challenge: what happens in a breakout room when no adult is watching?
On Zoom and Microsoft Teams, a teacher can visit one breakout room at a time. To check on another group, they must leave the first room and join the second. This means most of the time, most groups are unsupervised. If a problem arises—a student behaving inappropriately, a technical issue, or simply off-task chatter—the teacher may not find out until it's too late.
Simpleclass solves this with breakout room monitoring. Teachers can see and hear all breakout rooms at once from a single overview screen. They can monitor every group secretly—seeing and hearing students without appearing in the room—or silently (video only, no audio). If they need to intervene, they can drop into a room visibly or broadcast a message to all groups at once.
This design means every group is supervised, even when the teacher is not physically present. It restores the situational awareness that teachers have in a physical classroom, where they can glance around the room and see what every group is doing.
Why Invisible Monitoring Matters
Being able to monitor breakout rooms without students knowing is particularly valuable for younger learners and for group dynamics. When students know the teacher might be watching—but don't know when—they are more likely to stay on task. And because the teacher is not visibly present, the group dynamic remains natural; students don't change their behaviour simply because an adult has entered the room.
This is not about distrust. It is about creating a safe, accountable learning environment where teachers can respond quickly if something goes wrong, and where students know that their online classroom has the same standards and supervision as their in-person one.
How Simpleclass Prevents Zoombombing
Simpleclass was built from the ground up for tutoring and language teaching, and access control reflects that. Every participant—student and teacher—has an individual account. Sessions are tied to courses, and only enrolled students can see and join them. The backend mints a private, per-user token for each authenticated participant; there is no shareable URL or dial-in code.
This means:
- No meeting links to leak or forward
- No uninvited guests in your classroom
- No waiting room interruptions to review unknown arrivals
- Full control over who is enrolled in each course
Because access is by account, you also gain a complete attendance record automatically. The system knows who joined, when, and for how long. There is no manual register to take, and no ambiguity about who was present.
For institutions working with minors, this architecture offers an additional layer of safeguarding. Parents and administrators can be confident that only enrolled, known students are in the room, and that every breakout group is visible to the teacher.
Other Safety Features for Online Teaching
Beyond access control and breakout monitoring, Simpleclass includes several other features designed to keep online sessions safe and productive:
- Keep student cameras on: Teachers can require a student's camera to stay on, with the toggle disabled on the student's end. This helps maintain accountability and engagement, especially in one-to-one or small-group settings.
- Session recording: Record sessions for safeguarding, quality assurance, or review. Recordings are hosted in the EU and streamed back under your control—never publicly accessible.
- EU-hosted media and data: All video, recordings, files, and chat are hosted on servers in the EU (Scaleway, Paris), supporting GDPR compliance and data-residency requirements for European schools.
- Session reports for parents: Teachers can produce a session report and email it directly to a parent, providing transparency and building trust.
A Design Difference, Not a Feature Add-On
Zoombombing prompted many platforms to add waiting rooms, passcodes, and lock-after-start options. These are useful mitigations, but they are layers on top of a meeting-link architecture. They reduce risk; they do not eliminate it.
Account-based access is a different design philosophy. It treats the classroom as a closed, known group—more like a school building with a register than a public conference room with a door code. For tutoring centres, language schools, and independent tutors, this philosophy aligns better with how teaching actually works.
If you are tired of managing meeting links, policing waiting rooms, or worrying about who might drop into your breakout groups, it is worth considering a platform built around enrolment and supervision from the start. Compare Simpleclass and Zoom to see the differences in detail, or start a free trial to experience account-based access and breakout room monitoring in your own teaching.
Zoombombing does not have to be an accepted risk of online teaching. With the right platform design, it simply cannot happen.