MFA for school-linked accounts
Every school-linked customer account, including invited family accounts, requires a password and an authenticator code or single-use recovery code. Staff accounts also require MFA. This adds a second check against unauthorised access.