Two-factor authentication (2FA) for admin users

Two-factor authentication (2FA) for admin users

For: all admin users (Super Admin, Branch Admin, Manager and other admin roles)

With two-factor authentication you need two things to sign in: your password and a 6-digit code from an authenticator app on your phone. Someone who learns your password still can't sign in without your phone.

Policy

• 2FA has been mandatory for every admin user since 5 June 2026.
• No shared logins. The code is linked to one phone, so each person needs their own admin user. Create users under Organisation → User Profile.
• The User Profile list has a 2FA column showing which users have finished setup.

Set up 2FA

1. Install an authenticator app on your phone, such as Google Authenticator or any other authenticator app.
2. Sign in to the admin panel and open Organisation (bottom of the sidebar) → Organization Profile → Two-Factor Authentication tile.
3. In the app, tap Add or the + icon.
4. Scan the QR code shown on the page. If you can't scan, type the Secret Key (manual key) into the app.
5. Type the 6-digit code the app shows and click Verify and Enable 2FA.
6. The page now shows 2FA is Active.

Sign in with 2FA

1. On the admin sign-in page, choose your role and enter your username, password and the CAPTCHA code as usual.
2. The 2FA Verification page opens. Open your authenticator app and type the current 6-digit code into Enter 2FA Code.
3. Click Verify.

Codes change every few seconds. If a code is rejected, wait for the next one and try again. Check that your phone's time is set automatically, because a wrong phone clock gives wrong codes.

Changing or losing your phone

• New phone, old phone still working: sign in, then open the Two-Factor Authentication tile. If the page shows your QR code and secret key, scan it with the authenticator app on the new phone before you reset the old one. If it doesn't, contact support.
• Phone lost, or the app was deleted: you can't sign in without a code. Email [email protected] from your registered email address with your institute name and username so support can help you set up 2FA again.

FAQ

Do candidates need 2FA?
No. 2FA is for admin users only.

Can two colleagues share one admin login and one phone?
No. Create a separate user for each person.

I don't see the Two-Factor Authentication tile.
Press Ctrl+F5 to hard refresh, in case the old interface is cached. If the tile still isn't there, contact support.

Related

• Cannot log in to the admin panel
• Restrict candidate login to your institute's domain

Need help? Email [email protected] with your institute name, the exam name and schedule, and a screenshot. You can also connect over phone or schedule a meeting.