See who still needs to set up 2FA

3 steps 3 min Updated 4 November 2026

School settings → 2FA set-up shows who has to use two-factor authentication (2FA) at your school, who has set it up, and how long everyone else has left. Admins and owners always have to use 2FA. So does anyone your 2FA settings cover, and anyone whose own account has 2FA switched on. "Set up" means they've added an authenticator app or a passkey. Only active accounts count: a suspended account can't sign in.

The page works one school at a time. If you open it by its address while in MAT overview, it lists every school you can reach, with a School column — but MAT overview's sidebar has no link to it, so switch to a school and open it from School settings.

Steps

Step 1: Open the page

Go to School settings → 2FA set-up. You can also get there from the Admins not yet using 2FA list on the Password tab, and the 2FA settings button on this page takes you back to it.

Step 2: Read the counts

Have to use 2FA: everyone the rules apply to.
Set up: those who have an authenticator app or a passkey.
Overdue: their time to set it up has ended, or they never had any, so they'll be asked to set it up the next time they sign in.
In grace: they still have time. The list shows the date and how many days are left.
Starts at next sign-in: their days to set it up start counting the next time they sign in.

Under the counts, a line shows how many admins and owners have set it up.

Step 3: Find the people who haven't set it up

The Not set up yet list shows everyone who still has to, soonest deadline first, with admins and owners at the top. Turn off Admins and owners first to sort everyone by deadline only.

Select a count to show only those people, or use Filters to narrow by Status or Role. Search by name or username.

Select a name to open that person's account on the Security tab, where you can see their 2FA and reset it if they've lost their phone. In MAT overview, switch to their school first.

How long people have

Admins and owners have 14 days, counted from their first sign-in after 2FA became required for them, and never ending before 21 November 2026. If your school's 2FA setting for staff covers them, your school's Days to set up 2FA applies instead.
Everyone else has your school's Days to set up 2FA (on the Password tab), counted from when 2FA became required for them. 0 means they're asked at their next sign-in.

Deadlines show in your school's time zone.

What your staff see

While someone still has time, they can sign in as normal. Their Launchpad shows a reminder, Set up two-factor authentication (2FA) by a date with the days left, and a Set it up button. When it has passed, SmartLogin asks them to add a passkey or an authenticator app before they can carry on. See Set up two-factor authentication when you sign in.

Admins whose own account isn't set up also see a reminder on their ADAdmin dashboard, with their deadline and a Set up 2FA button.

Did this work for you?

If a step looked different on your site, tell us and we'll update the screenshots.