How do I enable two-factor authentication on my Khan Academy account?
Two-factor authentication (2FA) gives your Khan Academy account an extra layer of security. When 2FA is enabled, signing in requires two things: your password and a unique, time-sensitive code from an authenticator app. This extra step helps keep your account secure, even if someone else knows your password.
How to enable 2FA
- Sign in to your Khan Academy account.
- Go to your Settings page.
- Under Security, select Enable two-factor authentication.
- If prompted, reauthenticate using the credentials you normally use to sign in.
- Follow the on-screen instructions to scan the QR code with your authenticator app.
- Generate a six-digit code in your authenticator app and enter it to enable 2FA.
If you don't have an authenticator app, you can use an app such as Google Authenticator.
Save your recovery codes
After you enable 2FA, you'll receive a list of recovery codes. Save your recovery codes somewhere safe, such as your password manager or a printable copy. You'll need these codes if you lose access to your authenticator app!
That's it! Your account is now protected with 2FA.
Going forward, each time you sign in with your email address and password, you'll also need to enter a code from your authenticator app or use a recovery code.
Frequently Asked Questions
1. Do I need a 2FA code if I log in with Google/Facebook/another third party?
No, you will not need to enter a 2FA code if you sign in with Google/Facebook/etc.
2. Why are we using authenticator app-based 2FA instead of SMS, email, or hardware tokens?
We've chosen time-based one-time password (TOTP) 2FA via authenticator apps because it offers the best combination of security and user convenience. Unlike SMS, which can be vulnerable to SIM-swapping and interception, authenticator apps generate codes directly on your device, making them more secure.
3. Will this mean I have to get my phone every time I use khanacademy.org?
Only every time you log in to your account (so a new browser or computer, or periodically when your Khan Academy account logs out on its own).
4. What if I lose my phone or my authenticator app?
If you lose access to your authenticator app, you can use one of your recovery codes to log in to your account. This is why it's crucial to save them in a secure place.
5. What if I get a new phone? Do I have to re-enable 2FA?
If you get a new phone, you will need to disable 2FA on your account from the settings page and then re-enable it by going through the above process again.
Some authenticator apps, like Google Authenticator, give you the option to back up your codes to the cloud so you can retrieve them on another device signed in with the same account. The options for this depend on the authenticator app you choose.