Accounts are created by the school or district, or synced from its student information system. There is no public sign-up: students, teachers and guardians receive access from their school and cannot register themselves. Schools are responsible for keeping their user list accurate and for removing access when someone leaves.
Account holders are responsible for keeping their credentials secure and for activity under their account.