Sign-in Security for Schools

Last updated November 10, 2026

This page describes how people sign in to Flat for Education and what your organization can control.

Password rules

Minimum length: your organization sets the minimum, from 6 to 64 characters. Without a setting, new passwords need at least 8 characters.
Maximum length: 70 characters.
When the rules apply: whenever a password is set, which means at sign-up, when someone resets or changes their password, and when an admin or teacher creates an account. Flat for Education does not check the length when someone signs in, so a shorter password set under an older rule keeps working until it is changed.

Accounts that use a @gmail.com address can't have a password. They always sign in with Google. See Why do I have to sign in with Google when I use a Gmail address?.

For each email domain, your organization can require everyone to sign in with Google or Microsoft. People with an email address on that domain can't sign in with a password. Flat for Education sends them to Google or Microsoft instead.

Your school's identity provider then confirms who is signing in. If the school deletes or suspends a Google or Microsoft account, the person can no longer sign in to Flat for Education with it.

Multi-factor authentication

Flat for Education does not have its own multi-factor authentication. People who sign in to Flat for Education with their Google or Microsoft account get the multi-factor authentication of that account.

To require it for your teachers and students, turn it on in your identity provider (for example 2-Step Verification in Google Workspace, or multi-factor authentication in Microsoft Entra ID) and require Google or Microsoft sign-in for your domain. People then go through your provider's checks every time they sign in to Flat for Education. Accounts that sign in with a password only are not covered.

Automatic sign-out after inactivity

By default, people stay signed in. Your organization can choose an inactivity limit from 1 hour to 30 days. Once a member has made no request to Flat for Education for that long, their session ends on the web and in the apps, and they sign in again. This applies to every member of the organization.

Sign out of other devices

Anyone can end all their other sessions, on the web and in the apps, and the session they are using stays signed in. This also cancels any password reset or sign-in link that is still waiting to be used. Use it if you lose a device or sign in on a shared computer and forget to sign out.

Need to change a setting?

Contact Flat for Education support to set a password minimum, an inactivity limit, or required Google or Microsoft sign-in for your domain.