Two-factor sign-in for the most sensitive records a school holds.
Staff sign in with their password and a six-digit code from an authenticator app, so a stolen or guessed password is not enough to open a safeguarding case.
Quick answer
Does Child Protect support two-factor authentication?
Yes. Child Protect uses two-factor authentication with a time-based code from a standard authenticator app. Staff set it up when they first sign in with it switched on, receive one-time recovery codes, and are locked out after repeated wrong codes. If someone loses their device, a school or platform administrator can reset it after checking who they are.
How it works
Enter your username and password as usual.
Scan a QR code with an authenticator app on your phone and enter the first code.
Store the one-time recovery codes somewhere safe. Each works once.
From then on, enter the current code after your password.
Built for safeguarding
Stops password-only access
Reused or leaked passwords alone cannot open a case.
Lockout
Repeated wrong codes temporarily lock the account.
Audited
Reset and enrolment actions are recorded in the audit trail.
What it does not do
Two-factor authentication protects sign-in. It does not replace role-based access, which separately controls who can see each case, or the audit trail.
Common questions
Which authenticator apps work?
Any standard time-based one-time password app.
What if a staff member loses their phone?
They can use a recovery code, or a school or platform administrator can reset their authentication after verifying their identity.
Is two-factor authentication required?
It is available for staff accounts. Ask us how it is configured for your deployment.
Does it work for anonymous reporters?
Anonymous reporters do not sign in. Two-factor authentication is for staff accounts.
Last updated: 4 October 2026
See how access is protected.
Read about our security practices or request a demo.