Quizzes
86,441 views
25 min · 2 min read
7 steps
Advanced

How to protect online quizzes from cheating and multiple submissions

Protecting online quizzes from cheating and multiple submissions helps ensure fair assessment and reliable data. This guide gives practical, implementable measures you can use immediately, whether you run small classroom quizzes or larger assessments. Mix technical controls with clear communication to get the best results.

Verified by pleasexplain editors
  1. Step 1: Require authenticated logins

    Ask every participant to sign in with a verified account before accessing a quiz. Use single sign-on or institution-managed accounts and log user IDs and timestamps to link attempts to individuals for accountability.

    [Illustration: student logging into a quiz portal on a laptop with a lock icon visible]

  2. Step 2: Limit one submission per user

    Configure the quiz system to accept only one submission per account and record attempt numbers. If retakes are allowed, set a specific maximum (for example 1 initial + 1 retake) and enforce cooldowns of 24–72 hours between attempts.

    [Illustration: web interface showing 'attempts allowed: 1' with a countdown timer]

  3. Step 3: Randomize questions and answers

    Deliver randomized question order and shuffle answer choices for each participant to reduce copying. Create pools of at least 50% more questions than the quiz length so each student sees a unique selection.

    [Illustration: multiple screens showing different question orders and shuffled answer choices]

  4. Step 4: Set time limits and pacing

    Apply a reasonable time limit that matches task complexity, for example 15–30 seconds per multiple-choice question or 10 minutes per short-answer question. Close the quiz automatically when time expires to prevent extended collaboration.

    [Illustration: countdown timer over a quiz page with 12 minutes remaining]

  5. Step 5: Use browser and activity controls

    Enable secure-browser modes, disable copy/paste, and block new tabs or navigation if your platform supports it. Monitor activity logs for focus changes and consider flagging attempts with excessive switching behaviors.

    [Illustration: browser window in kiosk mode with disabled address bar and navigation buttons grayed out]

  6. Step 6: Monitor with proctoring and logging

    Combine live or automated proctoring tools with detailed logs: IP addresses, device fingerprints, and webcam snapshots where appropriate. Review flagged sessions for anomalies before deciding on penalties.

    [Illustration: dashboard showing flagged quiz sessions with IP addresses and thumbnail webcam images]

  7. Step 7: Design questions that reduce sharing

    Favor application, open-response, and scenario-based questions over recall-only items. Require 150–300 word short answers or multi-step problems that need unique reasoning, making dishonest copying harder.

    [Illustration: sample long-answer question with a student writing a multi-step solution]


  • Explain academic integrity rules clearly before each quiz and require agreement to a short honor statement.
  • Use question pools with at least 1.5–2 times the number of displayed questions to increase variation.
  • Set randomized start windows (15–30 minute randomized start within a scheduled slot) to avoid synchronized collusion.
  • Limit IP ranges or geo-fence exams for highly sensitive assessments to reduce shared-location abuses.
  • Provide practice quizzes that mirror security settings so students can prepare within the same constraints.
  • Rotate and update question pools every term; replace at least 30% of items each semester to limit item exposure.

  • Avoid overly intrusive monitoring that violates privacy laws or institutional policies; check consent requirements and local regulations first.
  • Do not rely on any single control; attackers frequently find workarounds, so combine behavioral, technical, and design measures.
  • Be cautious with strict time limits for students with accommodations; always honor documented accommodations and provide adjusted timing.
  • Secure backups and logs to prevent data loss, but protect them with access controls — leaked logs can expose answers and patterns.

Was this guide helpful?