Go to classroom →
Let’s get you ready

Start here.

Your school sets up ClassGuard once. After that, teachers choose a class and start teaching.

For the school administrator

Set up a small test first.

You only need one student, one classroom and one Chrome browser to check that everything connects.

  1. Add one student.

    Open Student lists. Enter a name and class / group name, then click Save student. A made-up Test Student is fine for a test. You do not need a spreadsheet.

  2. Create their classroom.

    Open Staff & classrooms. Enter a classroom name, choose yourself as the teacher, select the student’s group and click Save classroom.

  3. Connect the student’s browser.

    Return to Student lists → Connect a test student’s Chrome browser. IT downloads a setup code, opens IT device setup while signed in as an administrator, and authorizes the installed extension. Saving a student or downloading a code alone does not connect the device.

  4. Start the test lesson.

    Open My classrooms and start the saved class. With IT’s automatic-viewing settings enabled, the student browser connects during class and shows a visible notice. Allow about 30 seconds for it to appear.

Start with one student

Already have students? Continue with the next unfinished step on Student lists.

For teachers

Start your first class

  1. Open your school’s ClassGuard page.

    Use the address your school gave you. It is the page where you’ll see your students’ browsers.

  2. Sign in to your staff account.

    Use your school email and password. Replace your temporary password on first sign-in. Keep your password private.

  3. Choose your class.

    Open My classrooms and choose Start class on your assigned classroom. Your saved settings load automatically.

  4. Choose the websites students can use.

    Leave Only allow listed websites during this period checked. For an IXL lesson, type ixl.com. Put each website on its own line. Other sites will be blocked during this class.

  5. Click Start class.

    Students with ClassGuard set up and Chrome open appear automatically, usually within 30 seconds. Everyone’s browser is shown on one page. Students do not click Join or Share.

  6. Click End class when you’re finished.

    This stops classroom viewing and returns students to your school’s usual website rules. The class also ends when its timer runs out.

Open live classroom →
For students

Your browser connects during class

When your school has set up automatic viewing, open Chrome and use your school account. Your teacher starts the class, and ClassGuard connects your browser for you.

You do not need to open a ClassGuard page or press Share. A ClassGuard notice tells you when classroom viewing is on. Your teacher sees the Chrome tab you’re using. Other apps, your camera, and sound are not shown. No recordings are saved.

School IT handles device setup. Students do not have a ClassGuard login, dashboard or setup page. Ask IT if the device needs to be connected.

For school IT

Connect automatic website categories.

  1. Arrange provider API access.

    ClassGuard supports Webshrinker’s hostname category API. Confirm current availability, pricing and licensing for an embedded school filtering product with the provider. Review provider integration access.

  2. Save both credentials on the school server.

    For Render, add CLASSGUARD_WEBSHRINKER_ACCESS_KEY and CLASSGUARD_WEBSHRINKER_SECRET_KEY in the service’s Environment settings and redeploy outside class time. For a local test, run npm run configure:filtering; it verifies example.org and saves credentials through hidden terminal prompts. Keep keys out of chat and the extension.

  3. Test, review and enable.

    In District overview → Website filtering, test the connection, choose categories, review hostname-only data sharing, and save. IT must also set the school server address and enroll the managed browsers. The feature stays off until configured and explicitly enabled.

Only website hostnames go to the category provider. No student identity, screenshots, URL paths or search terms are sent. Unknown results stay blocked; existing trusted education sites keep their existing permissions. Daily outbound lookups are capped at 1,000 by default; IT can adjust CLASSGUARD_WEB_LOOKUPS_PER_DAY after reviewing provider costs.

For school IT · District rollout

One school connection. No student dashboard to manage.

Finish the small test above before enrolling a school. These are IT tasks; teachers only need their account and assigned classrooms.

  1. Use the school’s hosted ClassGuard address.

    If you are already signed in to this school’s dashboard, the server and first administrator are set up. Keep the school address handy. For a new server, follow classguard-server/README.md in the installation kit.

  2. Bring in your students and classes.

    Open Student lists → Connect a school system for Google Classroom, Clever, ClassLink, Canvas or OneRoster. IT must configure and approve provider access first. Review the students before saving. A CSV spreadsheet remains available if you need it.

  3. Add teachers and assign classrooms.

    In Staff & classrooms, give each teacher an individual staff account. Create their saved classroom and select the correct student group. Each live class supports up to 30 students.

  4. Force-install the extension and apply the school policies.

    Set the approved extension to Force install for student browsers in Google Admin / Chrome Enterprise, using a supported distribution channel. This prevents students from disabling or removing it in Chrome. Configure the school address, managed student identity and classroom viewing. Follow classguard-server/MANAGED-STUDENTS.md and classguard-server/BROWSER-VIEWING.md in the kit. Installing the extension alone does not enroll a student or enable screenshots.

  5. Check one managed device before expanding.

    Verify that its school browser identity matches the imported student, start their saved class, and confirm website rules, the visible classroom notice and active-tab screenshots. Then roll out to the remaining devices.

What do students have to do? With managed identity configured, they use their school Chrome profile. ClassGuard connects it automatically; there is no separate student portal or personal setup-code step. A visible notice remains on during classroom viewing.

What if managed identity is not configured yet? An administrator can authorize a test device through IT device setup. Do not treat that as a finished automatic district rollout.

Something missing?

I don’t have an address or staff account.
Ask your school’s IT person. The public ClassGuard.org website is where you get the kit; your school supplies the classroom connection.
My class isn’t in the list.
Ask your administrator to assign your classroom and its student group in Staff & classrooms.
A student’s browser isn’t showing.
Give it about 30 seconds. Check that Chrome is open, ClassGuard is installed, and the student is on the correct class list. Ask IT to check the student’s setup if it still does not appear.
A lesson website won’t open.
Check the website list for this class. Some lessons need a separate sign-in website too. Your school’s blocked websites stay blocked; ask IT about those.
Can students share an entire desktop?

Start an assigned saved classroom. An enrolled student can use Chrome’s sharing window for the separate manual desktop option. Managed automatic viewing shows the active Chrome tab.

ClassGuard 1.29Setup help

Connect your school systems

Import class lists from Google Classroom, Clever, ClassLink, Canvas, or a compatible OneRoster service. School IT approves the connection first; an administrator reviews students and classes before saving.

Open the integration setup guide