Skip to content

Your profile and two-factor authentication (2FA)

Manage your profile details and password, and secure your account with two-factor authentication.

Updated: October 16, 2026

On your profile page you manage your details, profile photo, signature, password and two-factor authentication (with backup codes). This is your personal account — not the organization settings. Open it by clicking your name at the bottom left of the sidebar.

Where to find it

Click your name at the bottom left → Profile. (Or via the sidebar under your account.)

Profile details

Editable: name, email, phone number and the Email Notifications toggle. Read-only (you can't change these yourself): username, role, organization, last login and login count. Click Save Changes to keep your edits.

Changing your password

  1. Enter your current password.
  2. Choose a new password (at least 8 characters).
  3. Confirm the new password — both fields must match.
  4. Click Change Password.

Setting up two-factor authentication (recommended)

A status block shows whether 2FA is on. If it's off, you see a warning and the Setup 2FA button:

  1. Click Setup 2FA.
  2. Scan the QR code with an authenticator app (e.g. Google Authenticator or Microsoft Authenticator).
  3. Enter the 6-digit code to confirm.

From then on, the portal always asks for that extra code after your password.

Required for administration. Two-factor authentication is always required for the superadmin; for admins and umbrella admins it becomes required from a date shown in the portal reminder. If you have no 2FA by then, the portal asks you to set it up right after you sign in. This also applies when you sign in with Microsoft (SSO). For teachers it stays recommended.

Resetting or disabling

If it's on, you see two buttons:

  • Reset 2FA — set up your authenticator app again (yellow warning dialog).
  • Disable 2FA — removes 2FA entirely (red warning dialog). Not recommended. If 2FA is required for your role, this button is not shown.

Both ask for a code from your authenticator app or a backup code to confirm; without a valid code nothing happens. A code you just used to sign in does not work here again — wait for the next one.

Profile photo, signature and backup codes

  • Profile photo: Change photo or remove it (max. 5 MB).
  • Signature: draw it once; it is selected automatically for reports and certificates.
  • Email Notifications: if you switch this off, you get no email notifications at all.
  • Backup recovery codes: when you set up 2FA you get 10 codes. Keep them safe. If you lose your phone, choose Use a backup code when signing in. When they run out, click Generate new codes and confirm with an authenticator or backup code; the old codes expire.
  • Trust this device: tick this at the 2FA step and the portal will not ask for a code on that device for 30 days.
  • Where am I signed in? Click the notification bell and then the shield: there you find your recent sign-ins, your known devices and Sign out everywhere.

Tips

  • Keep a backup of your authenticator (most apps offer cloud backup) so a new device doesn't lock you out.
  • Use a unique, strong password you don't reuse anywhere else.

Frequently asked questions

Can I change my own role or organization? No. Those fields are read-only; a lead admin or super admin changes them.

Do I change my language here? No — switch language and theme at the bottom of the sidebar.

Troubleshooting

  • My new password is rejected. It must be at least 8 characters and the confirmation must match exactly.
  • I lost my 2FA device. Sign in with a backup code (Use a backup code) and set up 2FA again afterwards. If you have no codes left, an admin with Manage users can reset your 2FA (Users → your account → Reset 2FA).
  • I don't see a profile page. You may be signed out — sign in again via the admin portal.

Related

  • Logging in and finding your way — the basics of the portal.
  • Administrators & permissions — who can do what (for lead admins).
Was this article helpful?