2-Step Verification for Google Accounts

Each staff Google account has access to lots of information, much of it sensitive, personal info about you and your students. To date, this information has been protected by your email address and password — two things you need to keep safely stored in your brain. But what happens if someone else figures out your email and password?

Anyone can sign in knowing only those two things, which is scary, considering that the email address itself is public info. This means that your password is the only protection for all of that data. Additionally, many services utilize Sign-in with Google — meaning your Google account's password is the only protection for services like Seesaw, Classmate Compass, and any other services using Sign-in with Google.

🙋 How do we fix this?

Introducing 2-Step Verification. Your password is something you remember (hopefully) and 2-Step Verification adds another element — something you have.

The way it works is simple: you still start the sign-in process using your email address and password, but before Google grants you access, they text a numeric code to your phone and request it as part of the sign-in process. This way, they’ve confirmed that you remember your password and that you have your phone (something that only you would have).

That might sound confusing, but there’s good news. 2-Step Verification is easy to set up, it’s only required when signing into a new device, and you don’t need to remember anything new because it’s based on something you have (not something you remember).

With the increase in cyber attacks targeting schools, we believe now is the time to implement 2-Step Verification.

🔐 Setup 2-Step Verification

What you'll need

• Your computer with Google Chrome
• Your email & password
• Your mobile phone

Instructions

Click here to get started

Or following these steps:

1. In Google Chrome, open your Google Account (click here).
2. On the left, click Security.
3. Under the heading “Signing in to Google,” click 2-Step Verification
4. Follow the on-screen steps, using your mobile phone number

Additionally, Google has it's own instructions on how to set up 2-Step Verification here.

What if I lose my phone?

Don't fret! If you lose your phone, or it's temporarily broken, our team can remove 2-Step Verification from you Google Account temporarily — letting login with just your email and password. In cases like this, we'd recommend having a coworker reach out on your behalf.

What if I don't have a phone?

If you don't have a phone, receiving a text message or phone call is pretty difficult to do. A common alternative is a hardware security key, a small keychain-sized device that will connect to your Mac, Chromebooks, iPad, etc and act as the "something you have". YubiKeys are a very popular brand, but there are many options to choose from. If you need one, reach out to us for a recommendation.