Security

Account and security

Everything about your ClassCheck account: change the password, turn on two-factor authentication, read the activity log, export your data, or delete the account for good.

Change password

  1. Open Account (top bar, right) or go straight to classcheck.net/account.
  2. In the “Security” section, click “Change password”.
  3. Enter the current password, then the new password twice.
  4. Save. Every other active session is signed out automatically.
Recommendation: Use a password manager (Bitwarden, 1Password, KeePass, or the one built into the browser). One unique, random password per service is the single most useful step for your account.

Forgot the password?

  1. On the login page, click “Forgot password”.
  2. Enter your email address.
  3. You receive a reset link (valid for 1 hour).
  4. Set a new password from that link.

For E2EE classes you also need your recovery phrase to recover the encrypted data.

Two-factor authentication (2FA)

2FA makes your account much harder to attack — even if your password is stolen, the second factor is still missing.

Turn 2FA on

  1. Open Account → Security.
  2. Next to “Two-factor authentication”, click “Turn on”.
  3. Scan the QR code with an authenticator app (Google Authenticator, Authy, Aegis, and so on).
  4. Enter the 6-digit code from the app to confirm.
  5. Store the backup codes safely — they save you if you lose your phone.

Sign in with 2FA

After the password, sign-in asks for the 6-digit code. The app shows a code that changes every 30 seconds.

Important: After 5 wrong 2FA entries the sign-in attempt is locked — sensible for security, and awkward when you are in a hurry. Keep your authenticator within reach.

Turn 2FA off

Account → Security → “Turn 2FA off”. The password is required as confirmation.

Account recovery

On first sign-up you can store a recovery email — a second address that a reset link can go to in an emergency. Recommended if your primary email is a school address you might lose.

With E2EE turned on you also get a recovery phrase — see Encryption.

Language and region

ClassCheck speaks 6 languages: German, English, Italian, French, Spanish, and Dutch. You can switch the language at any time:

  • Quickly: the language dropdown at the top right of the top bar.
  • For good: Account → Language — this also applies to emails and PDF exports.

The language of the students does not matter — they do not sign in. The language only affects your teacher interface.

Activity log

ClassCheck logs every security-relevant action on your account. Useful for data protection officers, and for you when something looks odd.

  1. Open Account → Activity log (or go straight to classcheck.net/settings/activity-log).
  2. A table of actions, timestamp, IP address (anonymized — the last octet is dropped), and user agent.
  3. You can filter by action type.

What is logged?

  • Sign-in (successful and failed)
  • Password change, 2FA turned on or off
  • Classes / subjects created or deleted
  • Collaborators added or removed
  • E2EE key shared
  • Data exports
  • GDPR actions (access, deletion)

Retention: 12 months. Older entries are deleted automatically (data minimization).

Active sessions

You can see which devices you are signed in on:

  1. Open Account → Active sessions.
  2. A list with device, browser, location (anonymized), and last access.
  3. Click “Sign out” to end a session at once — useful if you forgot to sign out on a school computer.

Limit: At most 5 sessions at once per account. A sixth sign-in signs out the oldest session automatically.

Export data (GDPR)

You can always ask for a copy of all your data (GDPR Art. 15):

  1. Open Account → Privacy and data export.
  2. Click “Download all my data”.
  3. A JSON file with 16 data categories is created:
    • Account, sign-in history, settings
    • Classes, subjects, columns, grades, notes
    • Student names (decrypted, where possible)
    • Collaborations, invitations
    • Activity log, GDPR requests
    • License / subscription / payments

More on single exports (grade lists, PDFs): Import and export.

Delete the account

Deletion is final. All of your classes, subjects, grades, and notes are removed and cannot be brought back. Shared classes lose your access (they stay with the owner). There is no “undo” after the waiting period ends.

How to delete your account

  1. Open Account → Delete account (at the very bottom).
  2. Optionally enter a reason (it helps us improve ClassCheck).
  3. Enter your password.
  4. Choose the type of deletion:
    • Delete immediately — the account and data are removed for good within the next few minutes.
    • With a 7-day wait — the account is deactivated at once (sign-in is impossible), and deletion happens after 7 days. Within those 7 days you can cancel by email to hi@classcheck.net.
  5. Confirm.

Recommended before you delete

  • Download a GDPR export so you have a copy.
  • Either leave shared classes, or talk with colleagues about transferring ownership.
  • With a school license: tell the license admin so the seat can be released.

Read next

← All guides