← All SocialNote Guides

Two-Factor Authentication

How to add an authenticator application to your SocialNote account, sign in securely, and retain access with recovery codes.

What two-factor authentication does

Two-factor authentication adds a second verification step to password-based sign-in. After entering your email address and password, you enter a current six-digit code from an authenticator application.

Factor	What it verifies
Your password	Something you know.
Authenticator code	Access to an authenticator you enrolled.
Recovery code	A one-time backup when the authenticator is unavailable.

Before you begin

You will need a standards-compatible TOTP authenticator application. Common choices include Google Authenticator, Microsoft Authenticator, 1Password, and other applications that support time-based one-time passwords.

• Install or open an approved authenticator application.
• Have your SocialNote password available for security confirmation.
• Choose a secure password manager or other organization-approved location for recovery codes.
• Complete setup on a private device and screen.

Set up an authenticator

If enrollment is optional, open Settings → Account Security and choose Enable two-factor authentication. SocialNote may ask you to confirm your password before displaying the setup screen.

1. In your authenticator application, choose the option to add an account.
2. Scan the QR code shown by SocialNote. If scanning is unavailable, enter the displayed setup key directly into the authenticator.
3. Find the current six-digit code for SocialNote in the authenticator application.
4. Enter that code in Authentication code.
5. Choose Confirm enrollment or Confirm and continue.
6. After SocialNote confirms that two-factor authentication is active, copy the recovery codes to a secure location.

When setup is required

When your district enables required two-factor authentication, an unenrolled user is directed to Set up two-factor authentication after signing in and confirming their password. Complete enrollment to continue to the SocialNote dashboard.

Once required by the district, users cannot cancel or disable enrollment. This prevents an account from returning to password-only sign-in while the requirement is active.

Sign in with a code

1. Enter your SocialNote email address and password as usual.
2. On Verify your identity, open your authenticator application.
3. Enter the current six-digit code associated with SocialNote.
4. Choose Verify and sign in.

Authenticator codes change regularly. If a code is rejected, confirm that you selected the SocialNote entry, wait for the next code, and try again. Also check that the device running the authenticator has the correct date and time.

Recovery codes

Recovery codes are backup credentials for situations when your authenticator is unavailable. Each recovery code can be used only once.

Store them safely

• Save them in a secure password manager or another location approved by your organization.
• Keep them separate from the device that runs your authenticator when practical.
• Never place them in a student record, service note, shared document, or ordinary email.
• Never send them to a person claiming to be SocialNote support.

Use a recovery code

1. After entering your email and password, go to the Verify your identity screen.
2. Enter one unused code under Recovery code.
3. Choose Use recovery code.
4. Mark that recovery code as used or remove it from your secure copy.

Generate a new set

Open Settings → Account Security and choose Generate new codes. You may be asked to confirm your password. Store the new codes immediately; every code from the previous set stops working.

If you lose the authenticator and recovery codes

Contact your district’s authorized SocialNote administrator or support contact. Expect the organization to verify your identity before requesting an enrollment reset.

After an authorized reset:

• The previous authenticator setup no longer works.
• The previous recovery codes no longer work.
• Existing SocialNote sessions are ended.
• You receive notice that the enrollment was reset.
• You sign in again and enroll a new authenticator.

Manage your enrollment

Use Settings → Account Security to see whether two-factor authentication is active, copy the current recovery codes, or generate a replacement set.

If two-factor authentication is optional, Account Security may also allow you to disable it after password confirmation. Disabling returns the account to password-only sign-in and invalidates the current recovery codes. When the district requires two-factor authentication, the disable option is not available.

Security reminders

Do	Do not
Use an organization-approved authenticator and password manager.	Share codes, setup keys, QR codes, or recovery codes with anyone.
Verify that a sign-in prompt follows an action you initiated.	Approve or answer an unexpected request for account verification.
Generate new recovery codes if their storage may have been exposed.	Store recovery codes in SocialNote student records or ordinary email.
Contact your administrator promptly after losing a device.	Ask another person to enroll their authenticator on your account.

Who can do what

Action	Who
Enroll an authenticator	Each user for their own account.
Use or regenerate recovery codes	Each enrolled user for their own account, after any required password confirmation.
Disable optional two-factor authentication	The account owner when district enforcement is not active.
Require two-factor authentication	Authorized SocialNote deployment administrators working with the district.
Reset a lost enrollment	An authorized administrator or support operator after following the organization’s identity-verification process.