To help keep your account and organization secure, Lessonspace requires two-factor authentication (2FA) for certain actions involving sensitive settings and permissions. Here's what you need to know about these requirements and how they work.
Which actions require 2FA?
You'll need to verify your identity using 2FA before making the following changes:
API keys
Creating a new API key
Revoking an existing API key
Organization settings and permissions
Transferring ownership of an organization
Adding or removing organization admins
Granting or removing developer access
Changing who can join Spaces, including non-members, joining with an email address, and requiring an email address
Security settings
Enabling or disabling an organization-wide 2FA requirement
Removing an existing 2FA method
Adding another 2FA method when you already have one set up
How does verification work?
When you attempt one of these actions, you'll be asked to verify your identity using 2FA.
Already have 2FA enabled? Simply complete the verification when prompted.
Haven't set up 2FA yet? You'll be guided through setting it up before proceeding.
Once you've successfully verified, you won't be asked to verify again for another 30 minutes within the same login session.
Setting up your first 2FA method also counts as successful verification.
When else is 2FA required?
If you've enabled 2FA on your account, you'll also be asked to verify your identity when signing in using:
Your password
An email sign-in link
The password reset process
Note: Signing in with Google does not currently trigger an additional Lessonspace 2FA verification.
What if my organization requires 2FA?
Organization admins can enable a requirement for admins and teachers to use 2FA.
If your organization has enabled this requirement but you haven't set up 2FA yet, you'll see a banner reminding you to do so.
For now, this reminder does not prevent you from accessing Lessonspace. However, you'll still need to set up 2FA before performing any of the sensitive actions listed above.
How do I set up 2FA?
You can set up two-factor authentication in your Lessonspace account settings. Check out this help guide for detailed instructions.
FAQ
Do I need to enable 2FA to use Lessonspace?
No. Two-factor authentication (2FA) is not required for general use of Lessonspace. However, you'll need to set up 2FA before making certain changes to sensitive organization settings, such as managing admin permissions, API keys or security settings.
What happens if I haven't set up 2FA yet?
You'll be prompted to set up 2FA when attempting an action that requires additional verification. You can also enable it in advance through your account settings.
Will I need to verify my identity every time I change a setting?
No. Once you've successfully verified your identity using 2FA, you won't need to verify again for another 30 minutes within the same login session.
Does signing in with Google require 2FA?
Signing in with Google does not currently trigger an additional Lessonspace 2FA verification. However, you'll still need to complete 2FA verification when performing sensitive actions that require it.
What if my organization requires 2FA but I haven't enabled it?
You'll see a reminder banner asking you to set up 2FA. You can still access Lessonspace, but you'll need to enable 2FA before making changes to sensitive settings.
Can I change or remove my 2FA methods?
Yes. You can manage your 2FA methods in your account settings. Removing an existing method or adding another method when you already have one set up requires 2FA verification.