Coming soon: email sign-in codes from 27 October 2026
Coming soon. This change starts on Tuesday 27 October 2026. It is ready in enrola and switches on for everyone that day. What you see may differ slightly from this description. We will update this article when it is live.
From Tuesday 27 October 2026, signing in to enrola takes one more step: after your password, you enter a six-digit code that enrola emails to you. Someone who learns your password still can't sign in without access to your email.
What will change
When you sign in on a device that enrola doesn't remember:
- Enter your email address and password as usual, and select Log in.
- enrola shows a page called "Check your email". It says: "We've sent a six-digit sign-in code to your email address. It expires after 10 minutes."
- Open the email called "enrola: your sign-in code".
- Type the six digits into Sign-in code.
- Select Verify and sign in.
Each code works once and expires after 10 minutes. To stop, select Cancel and return to sign in.
Keep me signed in on this device
If you tick Keep me signed in on this device on the sign-in page and then enter your code, enrola remembers that browser for up to a year. It won't ask you for a code there again until it stops remembering the browser, for example when:
- you select Log out
- you sign in on another device, because you can be signed in on one device at a time (see Why was I signed out?)
- your password changes or an Admin resets it
Only tick it on a device that only you use.
If the code doesn't arrive
- Check your spam or junk folder.
- Wait at least 60 seconds, then select Send a new code. enrola shows "We have sent a new sign-in code to your email address."
- Use the newest code. Any earlier code stops working.
- If no code arrives, ask your Team Owner or an Admin to check the email address on your user page in Settings → Users. Codes go to that address.
Limits and messages
| Message | What it means |
|---|---|
| "The verification code is not valid." | The code you typed is wrong. Check the newest email and try again. |
| "That code has expired. Send a new code to try again." | More than 10 minutes have passed, or the code was already used. Select Send a new code. |
| "Please wait … seconds before asking for another code." | You can ask for a new code once a minute. |
| "You have asked for several codes in the past hour…" | You can ask for up to 5 codes an hour. Wait the number of minutes shown. |
| "Too many incorrect codes. Send a new code to try again." | After 5 wrong tries, enrola throws the code away. Ask for a new one. |
| "Too many incorrect codes. Sign-in codes are paused for this account…" | After 10 wrong codes in an hour, enrola sends no codes and accepts none for the rest of that hour. |
If your codes are paused and you can't wait, contact support at support@enrola.co.uk. The enrola team can reset your sign-in codes from your user page, which also signs you out on every device.
What stays the same
- Your email address and password don't change.
- The wrong-password limit stays: after too many wrong passwords, sign-in pauses for 5 minutes. See Too many attempts: when sign-in pauses.
- You can still be signed in on one device at a time.
- Connections that use enrola's API don't use sign-in codes and keep working as before.
What you might need to do
- Everyone: make sure you can open your work email on the devices you use for enrola.
- Admins and Team Owners: check that every user's email address in Settings → Users is correct and is a mailbox they can read. A shared or old address means that person won't get their codes. See Add users and choose their role.
- If an email says "If you did not try to sign in" and you didn't, change your password and tell your Team Owner.