Educators: Multi-factor authentication

What is multi-factor authentication (MFA)?
​Multi-factor authentication in Storypark
​Setting up multi-factor authentication
​Using multi-factor authentication
​Multi-factor authentication errors

If you are interested in getting multi-factor authentication (MFA) set up for your service or organisation, you will need to contact the customer service team first.

Multi-factor authentication, also known by the acronym MFA, is an electronic authentication method where you are granted access to a website (or application) only after successfully presenting two or more pieces of evidence or factors. Often this is your password which is one factor, followed by a second factor.
​
MFA helps to prevent anything you can access (from your account) from being accessed by an unauthorised third party that may have been able to discover, for example, your password.

Currently multi-factor authentication is available as an extra layer of security for Admin educator accounts due to the nature of access they have in Storypark, including access to the account page, where a service's billing and subscription are managed.
​
​Storypark's multi-authentication options are your password (factor one) followed by either a one-time code from an ​authenticator app or a passkey stored on your device (factor two).
​
Once you've set up MFA, you will be prompted to provide both factors each time you login to Storypark as well as any time you wish to access the account page via the website.
​

Once set up by the Storypark team, all Admins at the service be prompted to set up multi-factor authentication for their accounts the next time they login or sign up. Depending on your situation, this may be:
- You have an existing login as an Admin at a service that has just added MFA

- You've recently been made an Admin at a service that already has MFA

Setting up
Once you've logged into the Storypark website with your existing email address and password, you'll be taken to a screen with a prompt to select a default or preferred authentication method:

The two options are:
​
​​Authenticator app - a free app that generates a one-time use code that refreshes every thirty seconds. You'll be prompted by Storypark's authenticator on the website to enter this code each time you login after entering your existing email address and password. We can recommend Twilio Authy, Microsoft Authenticator or Google Authenticator. If choosing this option, download this to a portable device you always have access to like a phone or tablet.
​
You may already have an authenticator app downloaded for use with other websites. In this case you can simply follow the prompts within that app to add a new account (i.e. Storypark). Once set up, you'll have seperate, unique codes for each account/website you have stored in your authenticator app.
​
Some password managers (like 1Password or NordPass) will also allow you to use them as an authenticator for websites with multi-factor authentication.
​
​​Passkey - a passkey is a secret 'key' stored on your device, either via a password manager or web browser. Each time after logging in, the Storypark authenticator will ask to access this. Note: If you use Storypark across multiple devices, we do not recommend this option, as the secret key can only be stored and used on one device.
​
You only need to make the default selection once, but you can choose to add another option later on, via the MFA screen.
​
​​Recovery codes
Regardless of the method you select, you'll also be prompted to save a set of recovery codes to complete your set up:

Recovery codes are important if:
- you forget your Storypark password
- your authenticator app is down/unavailable
- if you've lost access to the device that has your passkey stored on it.
​
Select Download to store a file with the codes onto your current device. You can then move this file elsewhere later or choose to print a physical copy.
​
Select Copy to save the codes to your device's clipboard which can then be saved in a password manager or another secure location of your choice.
​

Once you've done this, select the tick box I have saved my recovery codes in order to continue.
​
You will then see confirmation on screen that your default authentication method has been set up:

Once you've set up multi-factor authentication, you will be prompted to provide two factors (your password (factor one) followed by either a one-time code from an ​authenticator app or a passkey stored on your device (factor two)) each time you login to Storypark or visit your service's Account page via the website.
​
If you're using an authenticator app, you'll be prompted to enter a six-digit code to continue:

If you've opted for the passkey, you'll see a prompt asking you to allow the passkey to be accessed - this may differ slightly depending on where you've saved the passkey (e.g. in your web browser versus a password manager):

Entering in an expired or incorrect code from the authenticator app

Each code from your authenticator app lasts for 30 seconds and then refreshes. This means it is possible to enter a code that has timed out. In this event, you'll get a red message, Code is invalid or has expired and will need to try again. You get the same message if you enter a code incorrectly.
​
​Tip: If you have multiple website logins/accounts stored in your authenticator app double check you are entering the Storypark one. The authenticator app will generate seperate, unique codes for each account/website you have stored.
​
If you enter the code incorrectly ten times, you will be locked out for five minutes and will not be able to access your login on Storypark during that time. Select Exit on the screen and try again after five minutes.
​
If you need further help with authentication and/or logging into Storypark, please contact the customer support team with specific details.
​

📝 Other articles you may be interested in:
​How to create and manage a strong password
​Storypark's technology and security specifications