Two-factor authentication

Two-factor authentication (2FA) adds a second step to sign-in: after your password, you enter a short code. Set it up from My Account (click your name in the top-right corner).

Two methods

• Authenticator app — scan a QR code with an app like Google Authenticator or 1Password, then enter the 6-digit code it shows.
• Email codes — a 6-digit code is emailed to you at each sign-in. Codes expire after 10 minutes; you can request a new one after 60 seconds.

You can switch between methods any time from My Account.

Recovery codes

When you enable 2FA you'll be shown 8 recovery codes. Each works exactly once, and they are shown only once — save them somewhere safe (a password manager or printed copy). If you lose access to your app or email, a recovery code gets you in. You can regenerate a fresh set from My Account at any time; this invalidates the old set. Switching 2FA methods also regenerates them.

Turning 2FA off

Disabling 2FA requires your password plus a valid code from your current method.

If you're locked out

After several wrong codes, verification pauses for 15 minutes. If you've lost your 2FA method and your recovery codes, contact your school's administrator — they can reset 2FA on your account. You'll receive an email confirming the reset, and any passkeys on the account are removed as part of it. Your next sign-in will use just your password, and you can re-enable 2FA afterward.