Two-Factor Authentication
What is Multi-Factor Authentication?
Multi-factor authentication (sometimes referred to as "MFA", "2FA", or "two-factor authentication") is an additional layer of security that can be applied to many modern web-based accounts. It comes in many different forms, but they all perform the same function.
When you attempt to log in with a 2FA-enabled account on a new device, you are prompted to enter the usual username-password combination, but are then prompted to enter a verification code from whichever authentication method(s) you have set up. These methods for providing codes typically depend on having your cell phone with you.
By adding these codes to the sign-in process, this prevents any unauthorized users from accessing your account without your knowledge even if they have your password.
If you have signed into a device before using 2FA, you will not be prompted to enter a verification code again, unless you have had your password reset. You will need to enter a verification code while signing in if you are attempting to sign in on a new device or web browser as well.
Forms of Multi-Factor Authentication
There are three main types of MFA supported in Princeton ISD. Click on the sections below to learn more about them. Our recommendation is to use a Mobile Authenticator App.
Mobile (Authenticator App)
You may get a phone application on IOS and Android devices that provide the verification code. These codes are time-sensitive, and are only valid while they appear onscreen in your app. These time-sensitive codes prevent unauthorized users from logging into your account by resetting the codes every 30 seconds, and only being accessible on your phone.
An example of what the authenticator app looks like is shown below. Each code is associated with a different account, which may be Classlink, email, banking, Amazon, etc. Notice the timer wheel to the right of each code, which shows you how much longer that code is valid for. Do not feel pressured to enter the code before that timer completes. Sometimes it is necessary to wait until a new code appears, allowing you plenty of time to enter the new code.
SMS (Text Message)
You may also receive a text message containing a time-sensitive code as well. This prevents you from needing to download another application, but these codes usually stay valid for much longer. Text message and data rates may apply. While this method is still quite secure, it is less secure than the authenticator option, since the codes stay valid for much longer, and may be bypassed more easily.
Once the code is sent to your phone, you will be able to enter it on your device to finish the sign-in process. Once logged in, it is recommended to delete the text message.
Image
The Image option should only be used by students.
This final option is the least secure of the three presented here. You will select an image which you must remember, and then will need to select the correct image upon signing in to verify it is you.
While it is very simple to use, it is much more susceptible to random guessing, and so we only recommend using this option if you do not have a cell phone.
How to set up MFA
If you are being prompted with a screen that says Multi-Factor Authentication Setup immediately after logging in to ClassLink, click I am being requiredprompted to set up MFA below. Otherwise, click I am choosing to set up MFA.
I am being requiredprompted to set up MFA
- From the Select MFA dropdown, select your preferred MFA method. Again, we strongly suggest using a mobile authenticator app.
ClickFor more instructions, click on thebuttonsection below that corresponds to the option youchose for more instructions.chose.
Mobile Authenticator App (Recommended)
ForThere are many options to choose from when selecting an authenticator apps,app. thereMost arewill twowork optionsbut we suggest (bothusing one of whichthe areoptions free):below. Download and set up an authenticator app from your device's app store before proceeding.
- Google Authenticator (
if you haveUse a personal Googleaccountaccount,already)do not use your Princeton ISD email) - Twilio Authy
Search for whichever you prefer in the App Store (iPhone) or Play Store (Android) on your device, and download them.
Once downloaded, you will need to sign in:
ForSelectingGoogle Authenticator, log in with yourpersonalGMail account information.DO NOT attempt to log in with your work email.For Twilio Authy, you will need to follow the instructions in the app for linking your phone number to the app.
After logging in to your authenticator app, return to ClassLink.
Click on the "Select One" dropdown menu, and select Mobile Authenticator.
This should pull up a new window with a QR code.
Now return to
- Google Authenticator: a rainbow-colored + button at the bottom of the app's screen
- Twilio Authy: a + button with
"AddAccount"Account in the middle of the app's screen
- If prompted, be sure to give the app access to your camera.
Finally, enter
After the page updates, make sure you see a blue "Enabled" next to the "Mobile Authenticator" option. If it says "Disabled", click the blue "Re-enable" button below.
You're all set! You may be asked to enter a code from your authenticator app next time you log in.
SMS (Text MessageMessage)
On
- Once
Classlink page, click the "Select One" dropdown menu, thenyou select"select MobileSMS".
, enter your phone numberYou will then be prompted toSMS - Click the
green "Save"Save button - Enter the
bottom of the screen.After doing so, you will be asked to enter averification code thatiswas sent to your phone via text message.- If you do not receive the text message within 1 minute, click
the blue "RESENDCODE"CODE
aboveyour - If you do not receive the text message within 1 minute, click
- After entering the verification
code that has been texted to you,code, click"Submit"Submit
Once the page updates, make sure you see a blue "Enabled" next to the "Mobile SMS" option. If it says "Disabled", click the blue "Re-enable" button below.
You're all set! You may be asked to enter a text message code next time you log in.
Image selection (Weakest)
OnThe youImage Classlinkoption page,should clickonly thebe "Selectused One"by dropdown menu, then select "Image".students.
You should seeOn the following screen.
Here, simplyscreen, select an image that you will remember,remember then click the green "Save"Save button at the bottom of the screen.
Note: you can scroll further to view more images than the ones initially shown.
You're all set! You may be asked to select the correct image next time you log in.
I am choosing to set up MFA
- Login to ClassLink
- Click on the user profile button in the top-right of your screen
- Next, click on Settings
- Click on "Security".
- From the Select MFA dropdown, select your preferred MFA method. Again, we strongly suggest using a mobile authenticator app. Click on the button below that corresponds to the option you chose for more instructions.
Mobile Authenticator App (Recommended)
ForThere are many options to choose from when selecting an authenticator apps,app. thereMost arewill twowork optionsbut we suggest (bothusing one of whichthe areoptions free):below. Download and set up an authenticator app from your device's app store before proceeding.
- Google Authenticator (
if you haveUse a personal Googleaccountaccount,already)do not use your Princeton ISD email) - Twilio Authy
Search for whichever you prefer in the App Store (iPhone) or Play Store (Android) on your device, and download them.
Once downloaded, you will need to sign in:
ForSelectingGoogle Authenticator, log in with yourpersonalGMail account information.DO NOT attempt to log in with your work email.For Twilio Authy, you will need to follow the instructions in the app for linking your phone number to the app.
After logging in to your authenticator app, return to ClassLink.
Click on the "Select One" dropdown menu, and select Mobile Authenticator.
This should pull up a new window with a QR code.
Now return to
- Google Authenticator: a rainbow-colored + button at the bottom of the app's screen
- Twilio Authy: a + button with
"AddAccount"Account in the middle of the app's screen
- If prompted, be sure to give the app access to your camera.
Finally, enter
You're all set! You may be asked to enter a code from your authenticator app next time you log in.
Mobile SMS (Text MessageMessage)
On
- Once
Classlink page, click the "Select One" dropdown menu, thenyou select"select MobileSMS".
, enter your phone numberYou will then be prompted toSMS - Click the
green "Save"Save button - Enter the
bottom of the screen.After doing so, you will be asked to enter averification code thatiswas sent to your phone via text message.- If you do not receive the text message within 1 minute, click
the blue "RESENDCODE"CODE
aboveyour - If you do not receive the text message within 1 minute, click
- After entering the verification
code that has been texted to you,code, click"Submit"Submit - After the page updates, make sure you see a blue
"Enabled"Enabled next to the"MobileSMS"SMS option. If it says"Disabled"Disabled, clicktheRe-enable
Once
You're all set! You may be asked to enter a text message code next time you log in.
Image selection (Weakest)
OnThe youImage Classlinkoption page,should clickonly thebe "Selectused One"by dropdown menu, then select "Image".students.
You should seeOn the following screen.
Here, simplyscreen, select an image that you will remember,remember then click the green "Save"Save button at the bottom of the screen.
Note: you can scroll further to view more images than the ones initially shown.
You're all set! You may be asked to select the correct image next time you log in.