Signing In & Accounts

v4.18.0 Back to IB Marker

Signing In & Accounts

How signup, sign-in, verification, password reset, and school enrollment work — for students, teachers, and school admins.

Three ways to sign in

IB Marker accepts three sign-in methods. You can pick whichever works best for you — they're equivalent in what they unlock.

Email & password

Traditional signup with a verified email address and a password of your choosing. Best when you want full control over the credentials.

Sign in with Google

One-click OAuth via your Google account. Works for both personal Gmail and Google Workspace school accounts.

Sign in with Microsoft

One-click OAuth via your Microsoft account. Works for both personal and school / work Microsoft 365 accounts.

Your email address is your account.

Regardless of which method you choose, your account is keyed on a single email. If you sign up with Google using alex@example.com and later try to register that same address with a password, the system will recognise the conflict and prompt you to sign in the way you originally chose. You can add a password later from Settings.

Signing up with email

1

Fill in the signup form

Visit Signup, enter your email, and choose a password. The password field has an eye toggle for visibility and a live tooltip that shows which requirements you've met (minimum 8 characters and a mix of letters and numbers).

2

Check your email

We send a verification link immediately. Click it within a day to activate your account. If it doesn't arrive (check spam first), the verify page has a Resend verification email button.

3

Choose Student or Teacher

After verifying, you'll be asked to pick your role. Students go straight to the dashboard (with or without joining a school). Teachers enter a school code to be associated with their school — pending admin approval where applicable.

Signing up with Google or Microsoft

The OAuth path skips password and verification — the provider has already verified your identity. Click the Google or Microsoft button on the Signup or Login page, approve the consent screen, and you'll be returned to IB Marker as a signed-in user.

What OAuth signups look like

  • No password is set on the account. If you later try to "Forgot password," the same flow will let you set a password for the first time. Useful when you want to log in without OAuth later.
  • Your email comes from the provider. If your school uses Google Workspace and the address ends in your school's domain, the school's auto-join by domain rules (when enabled) will associate you with the right school automatically.
  • One-click on returning visits. You don't need to re-consent every time — click the same OAuth button on the Login page and you're in.
"This account was created with Google / Microsoft" messages.

If you try to sign in with a password on an OAuth-only account, we'll tell you clearly — rather than silently rejecting it as a wrong password. Use the matching OAuth button instead, or run a password reset to add one.

Email verification

Verification confirms you control the email address on the account. Until you verify, you can browse but you can't enter answers for AI marking.

If the email never arrives

  1. Check your spam / junk folder. Look for sender noreply@ibmarker.com.
  2. From the verify page, click Resend verification email. We allow a fresh send a few minutes after the previous one.
  3. If you suspect a typo in the email address, sign up again with the corrected one — the original incomplete account expires automatically.
  4. If you're certain none are arriving, contact support@ibmarker.com with your email address.

Joining a school

If your school is on IB Marker, joining it puts your account on the school's plan — higher AI allowances, access to teacher-created assignments, and the school's leaderboards.

1

Get the school code

Ask your IB coordinator or teacher. The code is short and case-insensitive. It's not a password — it's how the system associates your account with the right school's subscription.

2

Enter it on the Join School page

During signup, or any time later from Settings > School Access. If you signed up with Google or Microsoft using your school email and your school has auto-domain-matching turned on, you may already be associated — check your dashboard.

3

Wait for approval if required

Most schools have auto-approval on — you're in immediately. Some schools require the admin to verify each joiner. In that case you'll see a pending-approval banner on your dashboard; you can still practise on the Free tier while you wait.

Schoolless accounts

A school code is not required to use IB Marker. If you sign up without one, you become a "schoolless" student on the Free tier — unlimited practice questions, a small daily AI marking allowance, badges, leaderboards, and the Insights page. Everything that doesn't specifically need a teacher or class context works.

You can always join a school later from Settings > School Access by entering its code. Your accumulated progress, badges, and bookmarks carry over.

Resetting your password

1

Click "Forgot password" on the login page

Enter the email address on your account. We don't tell you whether the address exists — for privacy, the success message is the same either way.

2

Open the reset link in your email

The link is valid for 30 minutes and can be used once. If you let it expire or you reload the page after using it, request a fresh one.

3

Set a new password

Minimum 8 characters with a mix of letters and numbers. The same form also works for OAuth-only accounts that want to set a password for the first time.

Common account issues

  • "This account was created with Google/Microsoft"

    You're trying to sign in with a password on an OAuth-only account. Click the matching OAuth button instead, or run a password reset to add one to the account.

  • Pending approval banner that won't clear

    Your school admin hasn't approved you yet. Ping your teacher or coordinator; if they can't see you in their pending list, the school code you entered may have rotated — ask for the current one and re-enter it from Settings.

  • "Your school requires a school email" at signup

    The school you're trying to join has Require domain match turned on. Sign up with an address ending in your school's email domain (your @yourschool.edu address rather than a personal Gmail) or ask the admin to disable the policy.

  • Account locked out / can't log in

    If repeated wrong passwords have triggered a temporary slow-down, wait a few minutes and try again. If you've lost access to the email on the account, contact support@ibmarker.com with proof of identity — we can transfer the account to a new address.

Security notes

  • Passwords are hashed with a salted PBKDF2-SHA256 scheme. Plaintext passwords are never stored.
  • Reset links are one-shot. The token is cryptographic, valid for 30 minutes, and invalidated on first use. Old links sent before a successful reset are also invalidated.
  • OAuth uses the standard authorisation-code flow with PKCE. We only ever see your email address and display name — not your password.
  • School codes are not passwords — they're enrollment tokens. If yours leaks, your school admin can rotate it; existing students keep access.
  • If you suspect your account has been compromised, run a password reset (which invalidates any existing sessions) and contact support.