User guide
How to sign in, keep your account safe, and manage the directory.
Sign in
Go to /sign-in. Enter your email address and password, or choose Sign in with a passkey.
Each request keeps your session active for at least 30 more days. It ends 90 days after sign-in.
Sign out on shared devices when you are done.
Passkeys
A passkey signs you in with your fingerprint, face, or device PIN instead of a password.
Add one on /account/security with Add a passkey, then follow your device's prompt.
A passkey sign-in does not ask for an authenticator code.
Remove a passkey you no longer use from the same card. Passkeys work only at auth.spanishacademylive.com.
Set up the authenticator app
The authenticator app is optional. Go to /account/security and select Set up authenticator.
Scan the QR code with your authenticator app, or enter the setup key.
Confirm by entering the six-digit code the app shows.
Once confirmed, a password sign-in asks for a code on /sign-in/totp.
To turn it off, choose Turn off on the same card and enter your current password.
Lost authenticator
If you lose your phone or authenticator app, ask an owner to reset your authenticator. After the reset you sign in with your password alone, and you can set up a new authenticator. Your password and passkeys stay as they were. There are no backup codes in this release. If you forgot your password, an owner can set a new one and give it to you.
Change your password
Go to /account/security.
Enter your current password and a new password (12–256 characters). An authenticator does not need to be turned off first.
Language and theme
When you are signed in, open the account menu in the top bar to switch between English and Spanish and between light, dark, and system themes. Your choice is remembered after you sign out.
Connected apps
/account/agents lists the apps and AI assistants you allowed to use your account. They act with your own role.
Disconnect ends that approval and invalidates its access and refresh tokens. This applies to your own approvals only.
Security notes
Each request keeps a session active for at least 30 more days. Every session ends 90 days after sign-in. Sign out on shared devices. A passkey or the authenticator app adds protection beyond your password. Both are optional today.