How to create a secure online exam.
A countdown alone doesn't stop someone from looking answers up in another tab. Here's the full set of settings that actually make an online exam hard to game.
The short answer
Turn on tab-switch detection, question and answer randomization, a strict time window, a single-attempt limit, and OTP identity verification — all in the settings step of the same online test maker you'd use to build any test. None of it requires a separate tool; it's a different pass through the same settings.
Locking it down.
Four settings, configured before you share the link.
- 1
Set a strict, single time window
Use one countdown for the whole exam, or a per-question limit if you specifically want to discourage looking answers up between questions.
- 2
Turn on shuffle
Randomizing question and answer order means the person next to a test-taker isn't looking at the same thing at the same time.
- 3
Lock it to a single attempt
Turn off multiple attempts so a finished submission can't be reopened or retried.
- 4
Require identity verification for real stakes
Turn on OTP email verification so a test-taker has to confirm a 6-digit code before starting, cutting down on fake or duplicate entries.
What each safeguard actually does
| Safeguard | What it does |
|---|---|
| Tab-switch / window-blur detection | Flags when a test-taker leaves the exam screen during an active attempt |
| Question & answer randomization | No two test-takers see the same order, making it harder to copy from a neighbor |
| Timed windows | A strict countdown, per-exam or per-question, that closes the gap for looking answers up |
| Single-attempt lock | Prevents a finished submission from being reopened or retaken |
| OTP email verification | Confirms who's actually taking the exam before they can start |
Security is layered, not a single switch
No single setting makes a remote exam cheat-proof — each one closes off a different, specific way of gaining an advantage. Tab-switch detection catches someone leaving the screen; it doesn't stop a second device sitting out of camera view. Randomization stops copying a neighbor's answers in order; it doesn't stop two people comparing notes over chat. Layering several safeguards raises the effort required enough to deter casual attempts, even though nothing here is a substitute for in-person proctoring when the stakes genuinely call for it.
All of it sits on top of AES-256 encryption in transit and at rest, with data-handling practices built around FERPA, GDPR, and SOC 2 Type II requirements. See the full security suite for the complete technical breakdown.
Have a printed backup ready
Master Paper exports the same exam as a with-answers, without-answers, or blank offline paper — useful if a device or connection fails on exam day.
See How to Print an Online TestRunning a secure online exam from start to finish
Two weeks before: plan the rules
Decide the exam's duration, the number of attempts, which details participants must provide, and whether verification is required. Write these rules down and share them with participants well in advance, along with what happens if rules are broken. Clear, early communication prevents most disputes and makes honest participants feel the process is fair.
If this is the group's first online exam, schedule a short practice quiz with identical settings a few days before.
One week before: write and check questions
Build the exam from reviewed questions in your Question Bank. Favour application and scenario questions over simple recall, since they are much harder to look up during the exam. Use your own examples and numbers rather than well-known textbook questions whose answers are easy to find online.
Check every correct answer carefully; an error in a formal exam affects everyone.
Configure identity checks
Require the participant's email, and phone if useful, before they can start. Turn on OTP verification so each participant must confirm their email with a six-digit code, which prevents fake names, typos, and duplicate entries. Turn off multiple attempts so a participant who has already submitted is told the exam is complete rather than being allowed back in.
Configure timing and order
Set a whole-exam time limit that is fair but leaves little spare time for searching or messaging. The exam submits automatically when time runs out, so nobody can keep working past the limit. Shuffle questions so participants see different orders, which makes sharing answers during the exam far harder.
The day before: final checks
Take the exam yourself from the shared link, including the OTP step, on a phone and a computer. Confirm the timer, the number of questions, and the attempt setting. Send participants a reminder with the link, the start time, and a note to use a charged device with a stable connection in a quiet place.
During the exam
Watch submissions arrive in the quiz detail view, or with notifications turned on, as each participant submits. If someone reports a technical problem, note the time and details so you can decide fairly afterwards. Where the stakes justify it, combine the online exam with supervision in a room or on a video call.
After the exam: review before releasing
Check Question Performance for any question that behaved strangely, which may indicate an error. Look at time taken alongside scores; very fast completions with high scores, or unusual identical patterns across participants, may warrant a closer look. Treat such signals as reasons for a conversation, not automatic proof of misconduct.
Keeping records
Export results as CSV for your records and PDF for sharing with anyone who needs an official copy. Keep a note of any incidents and how they were resolved. Good records protect both you and participants if a result is questioned later.
Paper as a fallback
For participants who cannot take the exam online, export the same exam as an offline exam paper and run it under supervision. Using the same questions keeps conditions equal. Some organisations use paper for the final exam and the online version for practice, which combines the strengths of both.
Example: an institute's monthly exam
A coaching institute runs a monthly exam with sixty questions, a ninety-minute timer, shuffled questions, one attempt, and email plus OTP verification. Students receive the rules a week earlier and take a practice quiz with the same settings. After the exam, faculty review results and time taken before publishing the leaderboard.
Quick security checklist
Contact fields required. OTP verification on. Multiple attempts off. Realistic whole-exam timer. Questions shuffled. Application-based questions. Rules shared in advance. Exam taken once by you before sharing. Results reviewed before release.
Securing an online exam, answered.
How do I make an online exam secure?expand_more
Can it actually stop a student from cheating?expand_more
What's the difference between tab-switch detection and window-blur detection?expand_more
Should I require OTP verification for every exam?expand_more
Is exam data encrypted?expand_more
What if the internet or a device fails during the exam?expand_more
Lock down your
next exam.
Build the test, turn on the settings that fit the stakes, then share it.
Create Your Exam NowFree 7-Day Trial, No Credit Card Required