Using Cordika safely

Many schools share a computer: a front-office machine, a cart laptop, a classroom desktop several staff use. Cordika signs you out on its own after a while, but do not lean on that timer on a shared machine. Use the sign-out link in the account menu before you walk away from any shared computer.

If your district requires a second factor, you enroll it once in your account settings, using an authenticator app on your phone. When you enroll, Cordika gives you a set of one-time recovery codes. Save them somewhere other than the device you sign in on: a password manager, or a sealed note in a locked drawer. Do not email them to yourself. Email is the first place someone who already has your password will look.

If you lose your device and your recovery codes at the same time, ask your district’s Cordika administrator to reset your enrollment. Do not ask a colleague to use theirs. Each person’s second factor is their own.

Cordika sends a small, fixed set of automated messages: an invitation when you are added, a link if you request a password reset, and a note when your own schedule changes. Every one of those links goes to app.cordika.com. If a message asks you to enter your Cordika password anywhere else, or pushes urgency such as “your account will be closed today,” treat it as suspicious. Do not click through. Report it instead, using the address below.

Use a password for Cordika that you do not reuse on any other site. Cordika checks every new password against a public list of breached passwords and refuses one that has already been exposed, but that check cannot see a password you reuse somewhere else that gets breached later.

If something looks wrong, an email you did not expect, a login prompt that looks off, anything that makes you pause, send it to security@cordika.com. A person reads that inbox and will follow up. You will not be told you are overreacting.