Protect accounts with a second factor from an authenticator app. Enrollment is guided, recovery codes are issued, and the whole thing is a control you operate over your own platform.
Two-factor authentication uses time-based one-time codes from a standard authenticator app such as Google Authenticator, Microsoft Authenticator, or 1Password. Enrollment presents a QR code to scan, and the user confirms with a code from their app before it is switched on, so nobody locks themselves out by enrolling against a device they set up incorrectly. App-based codes are deliberate rather than a fallback: they do not depend on network coverage and are not exposed to the interception problems that affect SMS.
When two-factor authentication is enabled, recovery codes are generated so a user who loses their device is not permanently locked out. Codes can be viewed and regenerated, and regenerating invalidates the previous set, which is what you do after a set has been used or exposed.
Once enabled, signing in asks for the code after the password. It applies to the account it is enabled on, which matters most for administrator accounts, since those are the ones that can reach your whole user base, your course library, and your payment settings.
Two-factor authentication sits beside the platform's other authentication routes: ordinary password sign-in, Google single sign-on for organizations on Google Workspace, and magic-link sign-on for organizations that want people to arrive from their own internal portal. Which combination you offer is yours to configure.
Meet the account security expectations a public sector security review will ask about, particularly for administrator accounts that can reach personal data across an entire agency's workforce.
App-based codes work wherever your people are, including on networks where an SMS would not arrive reliably, which matters when your administrators are spread across regions.
A second factor from a standard authenticator app.
Recovery codes issued at enrollment and regenerable.
App-based codes work without SMS delivery or coverage.
Try the full Wisdom LMS platform for $0.99. No credit card required for the 14-day trial.