It&#x27;s pretty standard corporate practice to have a &quot;single sign-on&quot; that allows users to use the same user ID and password to access all resources.<p>It&#x27;s also difficult to secure machines in public places - anyone can sneak in to a classroom when it&#x27;s empty, and it only takes a short period of time to install a key-logger or other malware if you have physical access to a machine.<p>It&#x27;s certainly possible to have two authentication systems, a secure one and an insecure one, like you propose. However, it&#x27;s more work for the IT department to maintain two systems, and every user would need to know which user ID and password to use in which situation. The IT department may not have the resources to do this, or they may just be lazy.<p>Another approach to make the system more secure would be to not allow access to sensitive personal data through online systems at all. I work at a company with hundreds of employees where no personal data is accessible to employees online. For example, tax forms are mailed to employees&#x27; homes, and you have to go to the Human Resources Department to get any personal information updated. It&#x27;s cumbersome, but secure.<p>Since you probably have no power to change the way the college runs its systems, the only thing you can do to protect yourself is to change your password frequently.