PasswordStaff passwords expire every 90 days
Yours was last changed 2 August 2026, so it is good for another 62 days. Changing it signs out every other device and writes a line to the audit trail. We ask for the current password first, which is what stops someone at an unlocked desk from taking over the account.
At least 12 characters for staff, with a letter and a number.
Two-factorMandatory, cannot be switched off
Every staff sign-in asks for a second factor, on every device, every time. Learner accounts can opt out of this. Staff accounts cannot, because a single compromised panel login exposes every learner record.
Authenticator app Primary
Added 2 August 2026
Recovery codes
8 unused of 10. Keep them off this machine.
Hardware key
Not enrolled. Required for super admin accounts.
Where you are signed inStaff sessions expire after 8 hours
If you are locked outRecovery route
Staff password resets do not go out by email alone, because a compromised work inbox would then be enough to reach learner data. Use "Forgot password?" on the staff portal: it emails a code to your work address and asks for your second factor as well. If you have lost both, a super admin resets you from the team roster and the reset is logged with their name against it.