Profile and two-factor authentication
Your administrator details, photo, password change and two-factor authentication with an authenticator app or an email code.
Profile is the screen with your administrator details. It is in your avatar menu. There you change your name, photo, login email, password and two-factor authentication. What you change applies only to you: each administrator takes care of their own profile.
What is on the screen
The screen has three blocks. Each block saves in its own way:
| Block | What it holds | How it saves |
|---|---|---|
| My profile | Photo, Name, Email, CPF / CNPJ and Phone | Save now, in the bar at the bottom. The bar appears when there are changes |
| Change password | New password and Repeat password | The Change password button, which saves only the password |
| Two-factor authentication | Authenticator app and Email, each with Enable or Disable | Right away, after you confirm a code |
To see or edit another administrator, use Settings → Administrators.
My profile
- Photo: the image of your avatar in the dashboard. JPG or PNG up to 1MB.
- Name and Email are required.
- CPF / CNPJ (the Brazilian tax ID) and Phone are optional.
The email is your dashboard login. It cannot be the email of another administrator. If the email is already in use, the screen tells you and nothing is saved.
If you change the name, the email or the photo, the page reloads after Save now. That is how the top of the dashboard shows the new details.
Change password
- In New password, type the new password.
- In Repeat password, type the same password.
- Click Change password.
If the two passwords are different, the screen says: The passwords don't match.
The new password applies from your next sign-in. If your account has a password policy, the new password follows its rules. For example: a minimum length and no reuse of previous passwords.
How two-factor authentication works
With two-factor authentication on, you sign in to the dashboard in two steps:
- You type your password.
- You type a six-digit code.
The code comes from one of these two methods:
- Authenticator app: an app on your phone generates the code. For example: Google Authenticator, Authy or 1Password. This is the most secure method.
- Email: at each sign-in, Cademí sends a code to the email in your profile.
You can turn on one method or both. One does not depend on the other.
The most important rule: two-factor authentication belongs to each administrator. Each one turns it on in their own profile. There is no account switch that turns it on for everyone or makes the team use it. Students do not have two-factor authentication.
Step by step
Turn on the authenticator app
- In Two-factor authentication, go to the Authenticator app row.
- Click Enable.
- Scan the QR code with your authenticator app. If you prefer, type in the app the key shown below the code.
- Type the six-digit code the app generated.
- Click Confirm and enable.
The row then shows active. If the code is wrong, the screen tells you and you try again.
Turn on the email code
- On the Email row, click Enable. Cademí sends a code to the email in your profile.
- In Verification code, type the code.
- Click Confirm and enable.
If the code does not arrive, click Resend code by email.
Sign in with two-factor authentication on
- Type your email and password, as usual.
- On the Two-factor authentication screen, type the code.
- With the app: type the six-digit code from the app.
- With email: the screen says which address the code went to. If it does not arrive, click Resend code by email.
- With both methods on: you switch methods on the spot, with Use the authenticator app or Receive a code by email.
- Back to login cancels the sign-in.
The email code is valid for 10 minutes. After five wrong attempts, Cademí discards the code. Request a new one with Resend code by email.
Turn off a method
- On the method's row, click Disable.
- In Current code to disable, type a valid code. Use the code from the app or the code the screen just sent to your email.
- Click Disable.
Turning off one method does not change the other.
If you lost access to your code
Warning: this is where most mistakes happen. Pedro turns on only the authenticator app. Later, he loses his phone. There are no recovery codes, so he cannot sign in on his own. To avoid this, also turn on the email code.
- You have both methods on: switch methods on the sign-in screen.
- You have only the app and you lost your phone: contact Cademí support. Only the Cademí team resets a method.
- After the reset: the method goes back to Not set up. You turn it on again in your profile.
Each administrator's page shows the state of each method. In Settings → Administrators, open the administrator and go to the Two-factor authentication tab. The states are Enabled since, Setup not finished and Not set up. The Reset button only appears for the Cademí team.
Good to know
Half-finished setup.
If you close the window before confirming the app code, the method stays as Setup not finished. It is not asked for at sign-in. Click Enable again to generate a new QR code.
Authorizing applications requires two-factor.
To authorize an application to access your platform on your behalf, two-factor authentication must be on in your profile. Without it, the authorization is refused. The message says: To authorize an application, turn on two factor verification in your profile and try again.
It is recorded.
The administrator's activity shows when they turn two-factor authentication on or off, enter a wrong code or change their email. It is in Settings → Administrators.
Expired password.
In an account with a password policy, your password can expire. When it expires, the dashboard asks for a new one at sign-in (Your password has expired). You continue only after you change it.
Email and password only.
Administrators do not sign in with Google. Signing in with Google is only for students.
Frequently asked questions
Can I make two-factor authentication mandatory for the whole team?
No. There is no setting for that. Each administrator turns it on in their own profile. To see who has turned it on, open each administrator's page in Settings → Administrators.
I changed phones. How do I move the authenticator app?
If you still have the old phone, turn off the method in your profile. The screen asks for a code from the old app. Then turn it on again on the new phone. Without the old phone, contact Cademí support to reset the method.
The email code does not arrive.
Check the email in your profile and your spam folder. Then click Resend code by email. Each code is valid for 10 minutes. If you also have the app on, use Use the authenticator app on the sign-in screen.
Clones
This account's child platforms: what a clone receives from the source, what it can change, what stays separate, the student limit and replication.
Plan and student limit
Who counts toward the student limit, what happens when it is reached and how to free up spots. Also the storage and API limits.