Skip to main content

Noble Public Schools

#GoBears

Cybersecurity: Two-Step Verification (2FA)

For Staff · Tech Tips

Protect Your Google and Microsoft 365 Accounts

A password alone is no longer enough. Two-step verification adds a second check — a tap on your phone or a short code — so that even if someone steals your password, they still can’t get into your account.

Why It Matters Passwords Google Setup Microsoft 365 Setup Backup & New Phones No Smartphone or Texting Questions Get Help
2Accounts to protect — Google and Microsoft 365
3 monthsNew accounts must be enrolled within
~5 minTo enroll each account, once
0Change to your Windows computer login

New to Noble Public Schools?

New accounts must have two-step verification set up within 3 months. Don’t wait for the reminder — do it on your first week while you’re already setting up logins. It takes about five minutes per account, and an account that isn’t enrolled by the end of the window won’t be able to sign in.

Why It Matters

Two-factor authentication (2FA) and multifactor authentication (MFA) mean the same thing and are used interchangeably. Both describe the same idea: your password, plus one more proof that it’s really you.

Password theft or inadvertently signing into the wrong website are the most common ways accounts are compromised. Deceptive messages and lookalike sites trick people into sharing their passwords, and even experts are sometimes fooled. Signing in with a password and a second step on your phone protects against password-stealing scams — even if someone gets your password, they won’t have your phone.

By enabling 2FA, you significantly bolster the defense of your accounts. It ensures that even if your login credentials are compromised, an additional layer of security stands between potential threats and your sensitive data.

What’s Actually Behind Your Login

  • Your Google account — Chrome bookmarks and saved website passwords, Google Drive, Google Docs, Google Classroom, and PowerSchool Teacher.
  • PowerSchool Gradebook — PowerSchool now uses your Google account as the login, so protecting your Gradebook and student data starts here.
  • Your Microsoft 365 account — office.com, OneDrive, and Teams, including anything you’ve stored or shared there.
  • Every site whose password you saved in Chrome — if your Google account is compromised you would have to change the password on all of them, not just Google.

Good News

Enabling two-step verification will not affect your Windows computer login. It only comes into play when signing into Google or Microsoft 365. Once you’re signed in, you should only be prompted again if you sign out or re-authenticate.

Didn’t Start a Sign-In? Tap Deny

If your phone shows a Microsoft Authenticator or Google prompt for a sign-in you didn’t just start, tap Deny (or “No, it’s not me”). It means someone has your password and is trying to get past your second step. Never approve a prompt to make the buzzing stop — change your password and let us know.

Start With a Strong Password

Two-step verification is the second lock on the door. The first one still matters: your password is the key to your identity and your accounts, and most stolen logins start with one careless click or a password reused on a site that got breached.

  • Don’t share your password. Not with anyone, for any reason — no one from Noble Public Schools will ever ask for it, or for a verification code, by phone, email, or text.
  • Use a different password for every account. Never reuse one across sites or apps, and never use your computer login anywhere else. A generator such as the LastPass Password Generator makes strong ones for you.
  • Change passwords regularly. Update them with strong, hard-to-guess combinations. To change your district password: on a district Windows computer, press Ctrl+Alt+Delete and choose Change a password, or use the district password reset page while you’re on the school network.
  • Run a Chrome Safety Check. In Chrome, open the three-dot menu, then Settings › Privacy and security › Check now (or type chrome://settings/privacy in the address bar). It lists any weak, reused, or compromised saved passwords so you can fix them.

Unique Password

What happens in a breach

If a website you use is hacked, the stolen password only works on that one site. Once you change it, the attacker is locked out.

Reused Password

What happens in a breach

If you used the same password on your computer and other sites, a hacker could log into your email, hide alerts, and reach every password saved in Chrome. Fixing it means changing your computer login and every saved password — an exhausting process.

Set Up 2FA for Google

This covers Chrome, Google Drive, Google Docs, Google Classroom, and PowerSchool Teacher. Have your cell phone with you before you start.

  1. Open the Google 2-Step Verification page

    Go to Google’s 2-Step Verification setup and sign in with your Noble Schools Google account if you’re prompted.

  2. Click Get Started

    Google walks you through the rest one screen at a time.

  3. Click Continue

    You may be asked to re-enter your password — that’s normal.

  4. Enter your phone number

    Use the number of the phone you keep with you during the school day.

  5. Click Send

    Google texts a verification code to that number.

  6. Enter the verification code, then click Next

    Codes expire quickly — if it doesn’t work, request a new one.

  7. Click Turn On

    That’s it. Your Google account is protected. If you’d rather not receive text messages, use the Google Authenticator app instead — see No Smartphone or Texting below.

Start Google Setup Google Walkthrough with Screenshots

Set Up MFA for Microsoft 365

This covers office.com, OneDrive, and Teams. Noble uses the Microsoft Authenticator app for this one, so you’ll need your computer and your phone side by side.

  1. Go to the Microsoft MFA setup page

    On your computer, open aka.ms/mfasetup Website and log in with your school email address and password.

  2. Click Next on the “Action Required” pop-up

    Microsoft explains that more information is needed to keep your account secure.

  3. Install the Microsoft Authenticator app on your phone

    Get it from the App Store or Google Play — the links are on Microsoft’s Authenticator page. Then click Next on your computer.

  4. Launch the app — but don’t sign in yet

    This trips up most people. Instead of signing in, tap the blue QR icon at the bottom right of the app.

  5. Scan the QR code shown on your computer screen

    The app adds your Noble Schools work or school account automatically.

  6. Click Next and complete the authentication test

    Microsoft sends a test notification to your phone. Approve it to prove the connection works.

  7. You’re all done

    From now on, signing into office.com, OneDrive, or Teams sends a notification to your phone. Tap Approve and you’re in.

Start Microsoft 365 Setup Microsoft Walkthrough with Screenshots

Prefer a Different Microsoft Method?

At aka.ms/mfasetup Website you can click Add sign-in method and choose any of these. The Authenticator app is the district’s recommendation.

Authenticator App

Recommended

Works on iPhone or Android and doesn’t need cell service — Wi-Fi is enough. You approve a notification instead of typing a code.

Text Message

Phone — SMS

A code is sent to your cell phone by text. Simple, but it needs cell signal wherever you are in the building.

Phone Call

Phone — Call

An automated call asks you to approve the login. This is the option to use if you don’t have a smartphone.

Keep a Backup Method

Almost every 2FA lockout we see comes down to one thing: the phone changed and there was no second way in. Two minutes now saves you a morning later.

Set up a second sign-in method as soon as you finish enrolling. For Microsoft 365, go to aka.ms/mfasetup Website, click Add sign-in method, and add a text-message number or a second device. For Google, open your 2-Step Verification settings and add a backup phone, the Authenticator app, or a set of backup codes.

Getting a New Phone?

Do this before you wipe, trade in, or hand off the old one — while you can still approve a sign-in with it.

  1. Add a backup method while the old phone still works

    A text-message number is the quickest one to add. It’s what gets you back in if the new phone doesn’t cooperate.

  2. Install the authenticator apps on the new phone

    Microsoft Authenticator for Microsoft 365, Google Authenticator for Google if that’s the method you use. Install them, but don’t expect your accounts to appear on their own.

  3. Register the new phone from your computer

    For Microsoft 365, sign in at aka.ms/mfasetup Website and add the new device as a sign-in method — you’ll scan a fresh QR code. Do the same for Google in your 2-Step Verification settings.

  4. Remove the old device, then test

    Delete the old phone from your sign-in methods and sign in once to confirm the new one works. If you’re already locked out, open a workorder — a technician can reset your registration so you can start over.

No Smartphone or Texting

You have options either way — nobody gets locked out over a phone plan.

If You Have Wi-Fi but No Texting

  • Google Authenticator app — the recommended option if you can’t get text messages. It generates codes on the device itself.
  • Google prompt in another Google app — you can approve the sign-in from the YouTube app, the Google app, or the Photos app.
  • Microsoft Authenticator app — works over Wi-Fi with no cell service at all.

If You Don’t Have a Smartphone

  • Use the Phone — Call option — choose it during Microsoft 365 setup and use your classroom or office extension. An automated call asks you to approve the login.
  • Print Google backup codes — Google can generate a set of one-time codes you keep somewhere safe. Each one works once, so cross them off as you use them and generate a new set before you run out.
  • Ask IT to help configure it — open a workorder and we’ll set the call option up with you.

Never Share a Code

No one from Noble Public Schools will ever ask you for a verification code — not by phone, email, or text. If someone does, it’s a scam. Don’t give it out, and let IT know.

Common Questions

Answers below come from the district Technology Department.

How does 2FA help protect my personal information? The short version: your phone is the part a scammer can’t steal

Password theft or inadvertently signing into the wrong website are the most common ways accounts are compromised. For example, deceptive messages or lookalike sites often trick people into sharing their passwords. These password-stealing scams are common, and even experts are sometimes fooled. Signing in with a password and a second step on your phone protects against password-stealing scams. Even if someone gets your password, they won’t have your phone.

Why should I use 2FA? Chrome passwords, Drive, Classroom, and the Gradebook all sit behind one login

The main reason is to protect your Google, Chrome, and PowerSchool information — saved bookmarks, website usernames and passwords, Google Drive, Google Classroom, and PowerSchool Gradebook.

If your account is compromised, then not only do you need to change your Google password, but also any websites that you have saved the password for in Chrome. This can be a significant undertaking if you save all your website usernames and passwords in Chrome. Also, with PowerSchool now using your Google account as the login, protecting your Gradebook and student data is vital.

What if I don’t have texting or service on my other device? Wi-Fi is enough — use an authenticator app

If it has an internet connection (Wi-Fi), you can use the Google Authenticator app or a Google prompt in the YouTube app, Google app, or Photos app. We recommend using the Google Authenticator app if you can’t get text messages.

For Microsoft 365, the Microsoft Authenticator app works the same way over Wi-Fi.

How often will 2FA prompt me to authenticate? Not as often as you think

Each time you sign into Google or Microsoft 365. Once signed in, you should only be prompted again once you sign out or re-authenticate.

Can students use 2FA? Yes — with one thing to keep in mind

Yes. Anyone with a Noble Schools Google account can use 2-Step Verification. The thing to remember is that it will prompt them every time they log in to a Chromebook.

I’m new here — how long do I have? Three months, but there’s no reason to wait

New accounts must have two-step verification set up within 3 months. Once that window closes, an account that isn’t enrolled can’t sign in until it is.

Set it up during your first week alongside your other logins — it takes about five minutes per account, and you won’t have to think about it again.

What happens if I get a new phone? Handle it before you wipe the old one

Your accounts don’t follow you to a new phone automatically. Add a backup method and register the new device while the old phone still works — see Keep a Backup Method above.

If the old phone is already gone, open a workorder. A technician can reset your MFA registration so you can set it up again from scratch.

Does this change how I log into my classroom computer? No

No. Enabling two-step verification will not affect your Windows computer login. It is only required when signing into Google or Microsoft 365 services.

If Something Goes Wrong

What you’re seeing What to do
“Authentication is not strong enough” Your account has been set to require a stronger method. Sign in to aka.ms/mfasetup Website and upgrade from text message to the Authenticator app.
You can only sign in on your classroom computer Your classroom computer remembers your authentication; other devices require a fresh verification. Keep your phone nearby with the Authenticator app installed so you can approve the login.
New phone, or you lost your old one If the old phone still works, follow Getting a New Phone above. If it’s already gone, contact IT right away — a technician can reset your MFA registration so you can set it up again from scratch.
The code never arrives Check your signal, request a new code, and confirm the phone number on file at aka.ms/mfasetup Website. If texting is unreliable where you work, switch to an authenticator app.
A sign-in prompt you didn’t start Tap Deny. Someone has your password — change it right away and open a workorder so we can check your account.

Before You Submit a Workorder

Please first ask a fellow staff member for assistance — most setup snags are solved in a minute by someone who has already done it. If that doesn’t get you there, open a workorder and we’ll take it from here.

Get Help

Submit a workorder, select Username/Password, and describe your MFA issue. Include the error message you’re seeing and the device you’re trying to use.

Submit a Workorder Help Center: MFA Article

Questions?

Reach the Technology Department at (405) 872-7800 (extension 7800 from a district phone), or submit a workorder. More guides live in the Help Center.

More tech tips: Cybersecurity Awareness for Staff · Fake Invoices & Impostors · Security at Home · Tech Tips · Meet Your SMART Board · Get to Know Your Phone · Get More Out of Your Monitor · ChatGPT for Teachers · Staff Personal Devices