Turning on two-factor authentication
Since v0.11.5The admin panel supports authenticator-app two-factor authentication (TOTP — the same style of 6-digit code used by Google Authenticator, Authy, or 1Password). It’s optional per account today, but strongly recommended for every District Admin and Super-Admin.
- From your account page, start 2FA enrollment and scan the QR code with your authenticator app.
- Enter the 6-digit code the app shows to confirm enrollment.
- From then on, signing in requires your password AND a fresh 6-digit code — a stolen password alone can’t get in.
Losing your authenticator device locks you out of 2FA login. Ask a super-admin to clear TOTP on your account (this happens automatically when they reset your password with the reset-admin tool) if that happens.
The admin panel also locks an account for 10 minutes after 5 failed sign-in attempts, to slow down password guessing.