Keeping your account safe

This account holds children's records. A few things are worth knowing.

Two-step sign-in

Staff accounts with wider access are required to use a second step: an authenticator app on your phone producing a six-digit code.

Save the recovery codes you are shown when you set it up. They are the only way back in if you lose the phone. Without them, an administrator has to reset your second step, and until they do you cannot sign in at all.

Store them somewhere that is not the phone.

What nobody will ask you for

• Your password. Not the school office, not a teacher, not ShikshaFlow support. Nobody can read it and nobody needs it.
• Your authenticator code, over the phone or by email. A code is for the sign-in screen only.

Anyone asking for either is not who they say they are.

Shared and public computers

Sign out rather than closing the tab. On a school or library machine, assume the next person will use the browser.

If you think somebody else has your password

Change it immediately, then tell the school. They can see when your account was used and from where, which is how you find out whether anything actually happened.

Why sessions expire

You are signed out after a period of inactivity. On a shared staff computer that is the difference between a walk-away and an incident.