Security & Privacy
Enhanced security with token-based authentication
March 20, 2014
clever
From day one, Clever has been built to be the most simple and most secure data integration solution for schools. To improve on that promise, we are changing the way our partner applications authenticate with the Clever API.
EdTech applications currently access Clever’s API using an API key specific to the application. While this single-key approach is an industry standard, we realized we can improve on it. Going forward, apps will access the API using a token that is specific to the app and to the district. Each token provides access only to the data that an individual district has authorized for sharing with that app. Tokens provide increased security because each token provides access to a smaller set of data. Token-based authentication also helps Clever to scale smoothly, which is a key focus as we prepare for the busy back-to-school season.
We are encouraging all of our partners to implement this change by this summer. After July 1st, API implementations that make use of the old API keys will be rate-limited, and in Spring 2015 API keys will be fully deprecated for integrations.
We are supporting this change with updates across our product:
- access to tokens in partner dashboards, and programmatically upon district signup
- updated developer documentation
- updated client libraries
More information is available at our API Getting Started guide. And we invite your questions and feedback at tech-support@clever.com.
More to read
Company
Districts
Global
May 12, 2026
Clever Announces Smarter MFA for Schools on Microsoft: Introducing Device TrustFor 87% of school organizations, implementing MFA for students still feels like a far-fetched cybersecurity dream. The concern isn’t just technical — it’s practical. Will it slow down logins? Will younger students be able to manage it? Will teachers end up fielding a flood of helpdesk requests and mount a rebellion? Classroom MFA was built […]
Partners
May 8, 2026
How Clever Helps App Partners Prepare for Back to SchoolEvery August, districts flip a switch. Rosters change overnight. Students log in for the first time. And if their accounts in your app aren’t ready, you’ll hear about it fast. We’ve been through this season with thousands of app partners. We know what separates the ones who come out ahead from the ones who spend […]
Company
Districts
Global
April 15, 2026
(Student) identities are the new front door for attackers. Is your school ready?The old model of school cybersecurity was built around networks — protect the edge, control the hardware, keep the bad stuff out. That model is gone. Today, your users are the front door. And in K-12, that means millions of student accounts — most of them guarded with just one simple password. That's the reality we dug into during a recent Cybersecure Live webinar. Here’s the breakdown of why the "handle is jiggling" and how to bolt the door.