Two-Factor Authentication (2FA) and Auto Logout

Two-Factor Authentication (2FA)

2FA provides an extra layer of security by requiring a second step when logging in. Once a user enters their username and password, they will be asked to enter a six-digit code to complete login.

There are now two options for receiving this code:

Option 1: SMS Code

• The user receives a 6-digit code by text message.

• Requires a valid mobile number saved in the user’s profile. (You can view which users don't have a valid mobile phone number in the Two-Factor Authentication report in Admin > Authentication > 2FA report).

• The school will incur SMS costs.

• 2FA must be enabled by the school administrator for the relevant user group (Do this by going to Admin > Authentication > Security and selecting the relevant group here, i.e. staff, parents or students)

Option 2: Authenticator App (Recommended)

• Code is generated instantly in an app such as Google Authenticator, Microsoft Authenticator, Authy, or Duo.

• No SMS required so saves on SMS cost.

• Easy for user to set up.

• All users can now opt to use an Authenticator App, even if 2FA is not turned on school-wide. This gives flexibility and added protection. 

• Users must have the app on their phone and use it each time they log in

Here’s a step-by-step guide you can send to users (staff, parents, or students) explaining how to set up and use an Authenticator App and / or the SMS method. Click here for guide.

Auto Logout

To enhance security, we’ve introduced an Auto Logout feature that allows you to set a time limit for teachers, secretaries, and principals to remain logged into their VSware accounts. This can help in situations where a staff member leaves their device unattended for a period of time for example. 

Find it by going to Admin > Authentication > Security.

This is an optional feature and schools can decide what the exact time limit is for each user group. 

When enabled, and when the time limit has been reached, users will see a message on the screen asking if they want to stay logged in, or if they wish to log out. If they don’t respond within 30 seconds, they will be automatically logged out of the system. If they choose to stay logged in, the timer will reset.