Security and sign-in: questions and answers

Last updated 29 October 2026

  1. How do people sign in?
  2. Is two-step sign-in available?
  3. How is WISCA tested before a release?
  4. Are backups taken and tested?
  5. How do I report a security problem?

How do people sign in?

People sign in with a login their school issues: a school code, a username and a password. Passwords are kept only in a scrambled form that cannot be read back.

Is two-step sign-in available?

Yes. Two-step sign-in with an authenticator app is available, and recovery codes are given when it is set up.

How is WISCA tested before a release?

Before a release reaches a school it goes through hundreds of end-to-end checks in a real browser, on a desktop and on a phone, like an exam.

Are backups taken and tested?

Restoring the database from a backup has been tested. For how far back a restore can go and how often, ask the team.

How do I report a security problem?

Write to ceo@wisca.io and say what you found. Please do not include students' personal details.