Strengthening Security on NC3Certs


Dear NC3 network,


As part of our ongoing commitment to providing a secure, accessible, and user-friendly certification experience, we are introducing two important updates to NC3Certs:


  • Two-Factor Authentication (2FA) is now enabled to help protect user accounts and certification records.
  • "Group Codes" are now available for approved correctional facility programs where students do not have individual email access.

Two-Factor Authentication (2FA)

NC3Certs now requires Two-Factor Authentication (2FA) during login


How it Works


When you sign in to NC3Certs:

  1. Enter your username and password.
  2. A one-time verification code will be sent to the email address associated with your account.
  3. Enter the code to complete login.


This additional verification step helps ensure that only authorized users can access certification records and account information.

Updating Email Addresses

Verification codes are sent to the email address on file. An outdated or inaccessible address will prevent you from logging in.


Personal emails are no longer permitted for instructors or organizational staff, and must use an official organizational email (e.g. school or district email).


Students are recommended to use an active school-issued email address they can access to receive authentication codes. If your students are not provided with a school-issued address, a personal email is permitted.


Instructors and Staff Emails

You must use your official organizational email address (e.g., your school or district email).

  1. Log in to your NC3Certs account at: www.nc3certs.com
  2. Go to your profile or account settings (under your name in the top-right corner).
  3. Locate the Email field.
  4. Replace the current address with your official organizational email.
  5. Save your changes.


Student Emails

Completed by Website Support, Campus Admins, or Instructor Accounts

  1. Go to the Users page in your Instructor Dashboard.
  2. Search for the student by name or current email address.
  3. Locate the Email field.
  4. Replace the current address with the student’s active school-issued or personal email.
  5. Save your changes.


Alert Your IT Team to Whitelist NC3Certs Domains


To ensure that 2FA and other system emails from NC3Certs are not blocked or marked as spam, please share the following information with your IT or email security team and ask them to allow/whitelist these domains and addresses:


Email sending domain / address to allow:

  • noreply@nc3certs.com
  • primary sending address for NC3Certs notifications and 2FA codes


Domains to allow / whitelist:


You can suggest that your IT team:

  • Add these to the organization’s email allowlist / safe senders list.
  • Ensure that messages from noreply@nc3certs.com are not filtered to spam or quarantined.
  • If your organization uses strict domain filtering, explicitly permit emails and resources from the domains above so that 2FA codes and login notifications are delivered reliably.


If your IT team needs additional details (IP ranges, specific headers, etc.), they can contact Joseph Smith, Customer Success IT Coordinator, NC3.

New "Group Codes" for Correctional Facilities

Does your program serve students who do not have access to individual email accounts?


If not, this update does not affect your classroom.


Because 2FA relies on email verification, students in correctional facilities and other restricted environments may not be able to receive individual login codes. To address this challenge, NC3 has introduced "Group Codes."


Introducing "Group Codes"


How It Works

  • Generate: The approved Group Instructor creates a "Group Code" from the Group Edit page in NC3Certs.
  • Share: The code can be displayed on a projector, written on a whiteboard, or read aloud to students.
  • Log In: Students enter the "Group Code" in place of an emailed verification code.


Each Group Code remains active for 90 minutes.


This allows an entire class to access NC3Certs quickly without requiring individual student email accounts.


Who can use "Group Codes"?

"Group Codes" are available only to organizations partnering with correctional facilities where students have restricted email access.


To maintain system security, NC3 verifies each partnership before enabling the feature.


How to Request Access to "Group Codes"

Please have the following available:


  • Name of the correctional facility
  • State where the facility is located
  • Email address of the facility's education coordinator

Need Help?


If you experience login issues or need help updating account information, please submit a Help Request.


If you manage users for your organization, we strongly recommend:


  • Verifying that all users have current email addresses on file.
  • Ensuring your IT team has whitelisted the NC3Certs domains listed above.
  • Communicating these requirements prior to your organization's 2FA rollout.


Once 2FA is enabled, login verification codes will be sent to the email address on record. An outdated email address or blocked messages may prevent users from accessing their accounts.

 
Facebook  Instagram  LinkedIn  X