# Two-step sign-in

> A code by email after your password, and backup codes.

Source: https://paatya.net/docs/account/two-step-sign-in

Two-step sign-in adds a second check when you sign in. After your password, Paatya emails you a 6-digit code, and you type it in. Someone who learns your password still can't get into your academy without your email.

It's for admins and instructors, and **every admin must use it**: it protects your students, your money and your payout details. Students don't use it.

## The first time you sign in

If you haven't set it up yet, Paatya does it with you when you sign in:

1. Sign in with your email and password as usual.
2. On **Let's secure your account**, open the email from Paatya and type the 6-digit code into **Verification Code**.
3. Click **Verify and sign in**.
4. On **Save your backup codes**, click **Copy** or **Download** and keep them somewhere safe. They're shown only this once.
5. Tick **I have saved these codes somewhere safe**, then click **Done**.

From then on, every sign-in asks for a code. You can also set it up earlier yourself, as below.

## Turn it on yourself

1. Go to **Settings → Security**.
2. Click **Turn on**. Paatya emails a 6-digit code to the address you sign in with.
3. Type the code and click **Turn on**. If it didn't arrive, click **Send a new code**.
4. Save your **backup codes**. Click **Copy** or **Download**, and keep them somewhere safe. They're shown only this once.
5. Tick **I have saved these codes somewhere safe**, then click **Done**.

**Settings → Security** now shows **Two-step sign-in is on**, and how many backup codes you have left.

> **Tip:** An admin who signs in without a code, for example straight after creating the academy, after accepting an invitation or after resetting a password, sees **Set up two-step sign-in** on every page until it's done. Click **Set it up**, enter the emailed code, and save your backup codes.

## Sign in with a code

1. Sign in with your email and password as usual.
2. On the **One more step** screen, open the email from Paatya and type the 6-digit code into **Verification Code**. The code works for 10 minutes.
3. Click **Verify and sign in**.

If the code doesn't arrive, wait for the timer and click **Resend code**.

On a computer only you use, tick **Skip the sign-in code on this browser for 7 days** on the sign-in form. That browser then won't ask for a code for a week. Don't tick it on a shared or office computer.

## Use a backup code

Use a backup code when you can't get the email, for example when your inbox isn't available.

1. On the **One more step** screen, click **Use a backup code instead**.
2. Type one of your backup codes into **Backup Code** and click **Verify and sign in**.

Each backup code works once. When you're running low, get new ones.

## Get new backup codes

1. Go to **Settings → Security** and click **New backup codes**.
2. Type your password and click **Make new codes**.
3. Save the new codes, tick **I have saved these codes somewhere safe**, then click **Done**.

Your old codes stop working straight away.

## Turning it off

Because two-step sign-in is required for every admin, **Settings → Security** doesn't show **Turn off**.

> **Note:** Instructors find these settings under **My account**, not **Settings → Security**. To start again with new codes, use **New backup codes** above.

## If something goes wrong

- **The code didn't arrive.** Check your spam folder, then wait for the timer and click **Resend code**. Codes come from Paatya's address.
- **"That code is not right".** Check the digits and try again. The message says how many tries you have left.
- **"Too many wrong codes".** Go back and sign in again. You get a new code.
- **You were asked for a code on a browser you had skipped.** Skipping lasts 7 days, and changing your password forgets every skipped browser.
- **You can't get the email and have no backup codes.** Another admin can't turn it off for you. Email [support@paatya.net](mailto:support@paatya.net) from the address you sign in with, including your academy's address. We check it's you, then turn it off so you can sign in and set it up again.

## Related

- [Sign in and sign out](https://paatya.net/docs/account/sign-in)
- [Forgot your password](https://paatya.net/docs/account/forgot-password)
- [One device at a time](https://paatya.net/docs/account/one-device)