Authentication and Account Settings User Guide (Non-Technical)

This guide explains login, password recovery, email verification, and personal account settings.

Who should use this

• All users (admin, teacher, staff, invited users)
• Support staff helping users with access issues

Authentication pages covered

• Log in
• Register (if enabled)
• Forgot password
• Reset password
• Email verification
• Two-factor challenge

Account settings pages covered

• Profile
• Password
• Two-Factor Auth
• Appearance
• Delete account

---

1) Log in

Path: /login (on school domain)

1. Enter email address.
2. Enter password.
3. Optional: check Remember me.
4. Click Log in.

If two-factor authentication is enabled, you will be asked for an authentication code or recovery code.

---

2) Register (if available)

Path: /register

1. Enter name.
2. Enter unique email.
3. Enter password.
4. Confirm password.
5. Click Create account.

Note: Registration availability depends on system configuration.

---

3) Forgot password and reset flow

Request reset link

Path: Forgot password from login page

1. Enter account email.
2. Click Email password reset link.

Reset password

1. Open reset link from email.
2. Enter new password.
3. Confirm password.
4. Click Reset password.

---

4) Email verification

If email verification is required and your email is unverified:

1. Open verification prompt page.
2. Click Resend verification email if needed.
3. Open verification link from your inbox.

After verification, restricted actions become available.

---

5) Two-factor login challenge

When prompted during login:

1. Enter 6-digit code from authenticator app, or
2. Switch to recovery mode and enter a recovery code.

Use recovery code when phone/authenticator is unavailable.

---

6) Open account settings

Inside the app:

1. click user menu (bottom sidebar user area)
2. click Settings

Settings areas:

• Profile
• Password
• Two-Factor Auth
• Appearance

---

7) Profile settings

In Profile tab:

1. update name
2. update email
3. click Save

If email changes, verification may be required again.

---

8) Password settings

In Password tab:

1. enter current password
2. enter new password
3. confirm new password
4. click Save password

---

9) Two-Factor Auth settings

In Two-Factor Auth tab:

1. click Enable 2FA
2. scan QR code in authenticator app (or copy manual setup key)
3. if confirmation is required, enter 6-digit code
4. save recovery codes in a safe place

You can:

• view/hide recovery codes
• regenerate recovery codes
• disable 2FA later if needed

---

10) Appearance settings

In Appearance tab:

• choose preferred account appearance/theme options

---

11) Delete account

In Profile page, use Delete account section:

1. click Delete account
2. enter current password to confirm
3. confirm deletion

Warning: Account deletion is permanent and cannot be undone.

---

Common issues and quick fixes

• Login failed: verify school domain, email, and password.
• Forgot password email not received: check spam folder and email spelling.
• Reset failed: ensure password confirmation matches.
• Cannot pass 2FA challenge: use recovery code.
• Recovery codes lost: regenerate while still logged in.
• Email still unverified: resend verification from profile/settings page.
• Cannot access password/two-factor pages: account may need verification first.

---

If users do not see latest UI updates, ask technical support to run frontend build/dev commands (npm run build or npm run dev).