Set up two-factor authentication when you sign in

3 steps 6 min Updated 4 November 2026

If your school requires two-factor authentication (2FA, also called MFA), signing in takes two things: your password and a second step — a passkey (Windows Hello, Touch ID, your phone or a security key) or a 6-digit code from an authenticator app on your phone. The first time you sign in after it's switched on, the Realsmart sign-in page walks you through setting it up. It takes a couple of minutes, and you only do it once.

If your school gives people days to set 2FA up, you can sign in as normal until the deadline. Your Launchpad shows Set up two-factor authentication (2FA) by a date, with the days left, and a Set it up button. After that date you're asked at sign-in.

Before you start

Your school username and password.
A passkey or an authenticator app. A passkey needs nothing to install: it uses Windows Hello, Touch ID, your phone or a security key. For an app, install one on your phone or tablet, such as Google Authenticator or Microsoft Authenticator. If you already use one, it will work.
Your phone's clock set automatically, if you'll use an app. The codes are worked out from the time, so a phone whose clock is wrong gives codes that don't work. Turn on the automatic date and time setting.

Steps

Step 1: Sign in as normal

Go to the Realsmart sign-in page, or anywhere your school sends you to it. If you're asked, search for your school and choose it. Enter your Username (your school username, without the domain) and your Password, then select Sign in.

If your school requires 2FA and you haven't set it up yet, you'll see Set up two-factor authentication instead of going straight in.

Step 2: Choose a passkey or an app

If your browser can use passkeys, the page says A passkey is quickest. and offers Set up a passkey. Select it and follow your device's prompt — a fingerprint, your face, a PIN or a security key. When it's done you're signed in and 2FA is set up. If it doesn't work you'll see That passkey could not be set up. Please try again, or use an authenticator app.

To use an authenticator app instead, select Use an authenticator app instead. If your browser can't do passkeys, the page shows the app set-up straight away. It shows a QR code. In your authenticator app, choose to add an account (often a + button), pick the option to scan a QR code, and point your phone's camera at the code on the screen.

Can't scan it? Under the code it says Can't scan it? Enter this key manually:. Select Copy, or read the key off the screen, and type it into your app using its option to enter a setup key.

The new entry in your app shows your username and your school's name. If you have accounts at more than one school, that tells them apart.

You have up to an hour from when the QR code first appears to finish setting up. Reloading the page shows the same code.

Step 3: Enter the code (app only)

Your app now shows a 6-digit code for the account, and a new code replaces it every 30 seconds. Type the current code into Authentication code and select Verify.

That's it: you're signed in and 2FA is set up.

After your username and password:

If you use an authenticator app, you'll see Enter your code. Open your app, type the current 6-digit code for this account, and select Verify.
If you only have a passkey, you'll see Use your passkey. Select Sign in with your passkey and follow your device's prompt.
If you have both, you can use either.

Your school can let people skip the code when they sign in on the school's own network. If you're never asked for a code at school, that's why. You'll still be asked (or asked to set up 2FA, if you haven't yet) when you sign in anywhere else. Admins are always asked, even on the school's own network.

Add a passkey later

If you started with an app, you can add a passkey once you're signed in. Your Launchpad may offer Sign in faster with a passkey, or open your Profile page and choose Add a passkey under Security. You can have up to 10 passkeys, and you must have signed in with 2FA first.

If a code doesn't work

"Code is incorrect". The code changed before you submitted it, or your phone's clock is wrong. Wait for a fresh code and type it in straight away. Check that your phone's date and time are set automatically, and that you're using the entry for this account and school.

"Too many incorrect codes. Please try again in …". After five wrong codes you have to wait before you can try again. The message says how long.

"Your sign-in has expired. Please sign in again." You took too long. You have an hour to finish setting up, and about 15 minutes to enter your code on later sign-ins. Sign in again. If you were setting up for the first time, you'll get a new QR code. Delete the unfinished entry from your app and scan the new code, because the old entry's codes won't work.

"That passkey wasn't accepted. Please try again, or enter a code." Your device didn't recognise the passkey. Try again, or use your app's code if you have one.

New phone, or lost your phone

Changing phone and still have the old one? Some authenticator apps can move their accounts to a new phone. If yours can, move them before you reset the old phone, and nothing else is needed. You can also add a passkey on the new device first.
Lost the phone, deleted the app, lost your passkey, or can't move the account? Realsmart doesn't give out backup codes, so ask an admin at your school to reset your authenticator. That removes your authenticator app and any passkeys. The sign-in page says Lost your passkey? Ask your school's administrator to reset your two-factor authentication. You'll see the set-up screen again the next time you sign in. Repeat Steps 2 and 3 with your new phone, and delete any old entry for this account from your app.

For admins: the reset is on the person's Security tab. See Reset or switch off MFA for one user. For someone who genuinely can't use an authenticator app or a passkey, see Exempt one person.

Did this work for you?

If a step looked different on your site, tell us and we'll update the screenshots.