Email Verification & 2FA

Overview

This page is for tutors or students who want to confirm their email address and lock down their Tuitionable account with an extra layer of sign-in security. It covers two distinct things:

• Email verification — confirming the address you signed up with by clicking the link Tuitionable emails you, plus how to resend it if it never arrives.
• Two-factor authentication (2FA) — pairing your password with a rotating 6-digit code from an authenticator app, backed by single-use recovery codes for emergencies.

Email verification and 2FA are separate and independent. You can verify your email without ever turning on 2FA, and you can enable 2FA whether or not your email is verified.

Verifying your email address

When you register with an email and password, Tuitionable sends a verification message to that address. The email contains a single button or link that confirms the address belongs to you.

The verification notice

If you land on the verification screen (route email/verify), you will see a short message confirming an email was sent, along with two buttons:

• Resend Verification Email — sends a fresh link to your address. After it sends, the page shows a confirmation banner reading “A new verification link has been sent to your email address.”
• Sign Out — logs you out of the current session.

Completing verification

Open the email and click the link. It points back to a secure, signed URL that marks your address as confirmed and returns you to the app. Once confirmed, the verification notice will no longer prompt you.

The verification link is tied to your account and the exact email address on file. If you change your email later from Account & Security Settings, request a new link for the new address.

Verification & booking a session

You can browse tutors, search, and use your dashboard without verifying your email. You'll need to verify before you book a session.

Why we ask
Booking confirmations, tutor details, and receipts are sent by email. Verifying makes sure they reach you, and helps keep Tuitionable safe for students and tutors.

How to verify

1. Sign up. We'll send a verification email instantly.
2. Open the email and click **Verify email address**. 3. Return to Tuitionable and book your session.

Tried to book before verifying? If you see "Please verify your email address before booking a session," your email isn't verified yet. Check your inbox (and spam folder) for our email and click the link inside. You can also select **Resend verification email** on that page.

For the full booking walkthrough, see Booking a Session.

What two-factor authentication adds

Two-factor authentication (2FA) requires a second piece of evidence at sign-in: a time-based one-time password (TOTP). After you enter your email and password, Tuitionable asks for a rotating 6-digit code generated by an authenticator app on your phone. Even if someone learns your password, they cannot sign in without that code.

You will need a TOTP authenticator app. Common choices include Google Authenticator, Authy, and 1Password — any app that supports standard TOTP works.

2FA is yours to switch on — it is not forced on your account. You decide when to enable it and can turn it off again from the same screen.

Enabling 2FA

2FA is managed from your settings. Open Settings, choose the Security tab, and find the Two-factor authentication card. A status badge tells you which state you are in:

Step 1 — Start setup

Click Enable 2FA. Tuitionable generates a secret for your account and moves the card into the Setup in progress state. A QR code appears.

Step 2 — Scan the QR code

Open your authenticator app and scan the QR code shown under “Scan in authenticator.” The app adds a new entry that starts producing 6-digit codes.

Step 3 — Confirm with a code

Type the current 6-digit code from your app into the confirmation field and click Confirm. This finishes setup and flips the badge to Enabled. If the code is wrong or expired, you will see an error — wait for your app to roll to a fresh code and try again.

Setup is not complete until you confirm a code. While the card shows Setup in progress, your account is not yet protected by 2FA. Finish the confirmation step or use Cancel setup to back out.

Recovery codes

When you set up 2FA, Tuitionable also generates a set of recovery codes. These are your backup way in if you ever lose access to your authenticator app — for example, if you replace or wipe your phone.

• During setup, the codes appear under a Recovery codes (save these) panel. Copy them somewhere safe and private.
• Once 2FA is enabled, you can reveal them again with Show recovery codes on the Security tab.
• Each code works only once. After a code is used to sign in, it is consumed and cannot be reused.
• To replace your set — for instance if you think they were exposed — click Regenerate recovery codes. This issues a brand-new batch and invalidates the old one.

If you lose your authenticator and all of your recovery codes, you may be locked out of 2FA entirely. Store your recovery codes somewhere separate from your phone, and regenerate them if you ever run low.

Signing in with 2FA

Once 2FA is enabled, your sign-in gains an extra step. After you submit your email and password correctly, Tuitionable takes you to the Two-Factor Authentication challenge screen instead of straight to your dashboard.

Using your authenticator code

The challenge asks for the current 6-digit Authentication Code from your app. Enter it and click Verify to finish signing in.

Using a recovery code instead

If you do not have your authenticator handy, click Use a recovery code instead. The field switches to accept one of your single-use recovery codes. Enter a code and click Verify. You can switch back with Use authentication code instead.

Authenticator codes rotate every 30 seconds. If a code is rejected because it just expired, wait for the next one rather than re-typing the same digits.

Disabling 2FA

To turn 2FA off, return to Settings · Security · Two-factor authentication and click Disable 2FA. Your account drops back to password-only sign-in, and the badge returns to Not enabled. You can re-enable it at any time, which generates a new secret and a new set of recovery codes.

Disabling 2FA removes your authenticator pairing and invalidates your current recovery codes. If you turn 2FA back on later, scan the new QR code and save the fresh recovery codes — old ones will no longer work.

Troubleshooting

Related pages

• Account & Security Settings — manage your name, email, password, and the Security tab where 2FA lives.
• Creating an Account — register as a student and reach the verification step.
• Booking a Session — the flow that may sit behind the email-verification gate.
• Getting Help & Support — reach a human if you are locked out of your account.