Substitute Portal

So, we have the substitute portal turned on with the date options included. Somehow students have figured out the password and are changing their attendance. We have changed the password several times, but do the fact that we have a Technology College that uses our system too, our password keeps getting out. Does anyone have some suggestions?