Education Sector - Protecting Student Accounts

Hello everyone, would love to hear some advice/wisdom. I'll have context and tl;dr below.

Context: I work in a medium-sized school district (about 6k students from elementary to high school) and we've recently decided we needed to tackle stepping up our student account security. We allow them to set their own passwords with essentially zero minimum policy, mostly due to the elementary students not being able to remember difficult passwords, and we do not enforce MFA. We also have a …

account accounts account security advice blueteamsec context education education sector hello high high school love medium own passwords policy protecting school school district sector security student students work