Turn on two-factor sign-in and find it in the audit log

Two-factor authentication adds a code from your phone to your password. Every staff account can turn it on for itself. Only the “Founder” can read the audit log.

Before you start

• Sign in as “Founder”, with your phone at hand.
• Install an authenticator app on the phone, for example Google Authenticator, Microsoft Authenticator or 1Password.

Steps

1. Press your name at the bottom of the menu. Your profile opens.
2. In the block “Two-factor authentication”, press “Set up two-factor”.
3. Scan the QR code with the authenticator app. If you cannot scan it, type the key shown under the code into the app.
4. Type the six-digit code the app shows and press “Turn on”.
5. Copy or download the recovery codes and keep them somewhere safe, not on the same phone. They are shown only once. Then press “I have saved them”.
6. To see the record, open “Administration”, then “Audit log”, and press “Two-factor”.

Result

From now on, each sign-in also asks for the six-digit code. The block shows “On” and how many recovery codes are left. The audit log has an entry with your name and the time: “turned on two-factor authentication”.

If something looks different

• If you lose your phone, sign in with one of the recovery codes. Each works once.
• If you do not see the block “Two-factor authentication”, your account is not a staff account. Students and parents cannot use two-factor.
• To make two-factor mandatory for a role, tick it under “Require two-factor authentication” on the page “Center details”.