Two-step sign-in with an authenticator app

Two-step sign-in adds a 6-digit code from an authenticator app after you sign in. It is optional for parents and required for teacher and staff accounts. When it is on, we ask once each time you sign in on a device.

Who needs it

Turn it on

1. Sign in and open Account, then Security (at /account/security). Teachers are sent there automatically after their first sign-in.
2. Choose to set up two-step.
3. Scan the QR code with an authenticator app, or type the key into the app.
4. Enter the 6-digit code the app shows.
5. Press "Turn on".
6. Save your backup codes. They are shown once: "Save them now; we can't show them again." See Backup codes.

What you'll see at sign-in

After you sign in by email link or code, the page at /account/verify says: "We ask for this once each time you sign in on a device." Enter your 6-digit code. You can enter a backup code instead.

Signing in with a passkey counts as two-step already, so you are not asked again.

Limits

• 5 two-step checks per 5 minutes.
• 5 wrong codes lock the check for 15 minutes. You will see: "Too many tries. Wait 15 minutes, or sign out and use a backup code."

Turn it off

Only parents can turn two-step off. Teacher and staff accounts cannot. Open Account, then Security, and use the option to turn it off.

If it doesn't work

• The code is rejected. Authenticator codes change every 30 seconds or so. Wait for a fresh one. Check that your device clock is set automatically.
• You lost your phone. Use a backup code. If you have none, email support@taletykes.com from the account's address.
• You are locked. See Too many tries.

Common questions

Which app should I use? Any authenticator app that accepts a QR code or a key works.

Next: Backup codes.