Zoom provides several security features and built-in bot protection to help block unauthorized participants or bots. Bots, such as AI notetakers and content scrappers, try to join as a participant and appear in the video tiles and the participant list, making them difficult to distinguish from real users.
Bots typically join through one of two paths:
The Meeting SDK block/allow list lets you control which Meeting SDK apps can join your meetings. You can allow or block specific SDK apps that are published to the Zoom Marketplace. Meeting SDK apps that aren't published to the Zoom Marketplace can't join meetings outside the developers account.
Learn more about configuring the Meeting SDK block/allow list.
Zoom Web App includes built-in bot detection that automatically identifies and intercepts automated or suspicious participants. If a real user is flagged by the system, they can still sign in to join the session.
Web App bot protection is enabled for all accounts by default and can't be turned off, so no action is required on your part to protect against Web App bots.
You can require participants to be signed in to their Zoom account before joining a meeting or webinar. This prevents anonymous or unauthenticated users, including bots, from entering your sessions.
To require sign in to join settings, learn more about requiring authentication to join meetings and webinars.
You can also limit the sign-in requirement to only the Zoom Web App, which minimizes the impact on participants using the desktop or mobile app.
To require sign in to join on the Web App only, learn more about requiring sign-in for the Web App.
You can restrict meeting and webinar access based on email domains. This ensures that only participants from approved organizations or domains can join your sessions, and prevents users with unapproved email domains from entering.
To configure domain-based restrictions, learn more about blocking specific domains from joining meetings.
The waiting room lets you control who enters your meeting or webinar by holding participants in a queue until you admit them. This gives you the opportunity to review and verify each participant before they join the session. You can configure the waiting room to auto admit signed-in users, but guest users (users who are not signed in) are placed in the waiting room for the host to review.
To enable and configure the waiting room, learn more about enabling the waiting room.
The Meetings app dashboard shows an overview of what apps are attempting to join, joining, or being blocked from your meetings and webinars.
To view the bot blocking dashboard, learn more about bot blocking dashboard.