Signing In & Accounts

v4.18.0 Back to IB Marker

Signing In & Accounts

How signup, sign-in, verification, password reset, and school enrollment work — for students, teachers, and school admins.

Try it before you sign up

You don't need an account to see whether IB Marker is worth it. The public practice pages let you answer real IB-style questions, subject by subject, with no sign-in required. Pick a subject and you're dropped into a short demo session with AI opponents; your written answers are saved and marked by AI once you sign up.

Your demo result carries into signup.

When the demo session ends, you'll hit a screen asking you to sign up free to keep going. Click through from there (rather than starting a fresh signup elsewhere) and your demo answers are attached to the new account automatically, then marked by AI on the page you land on after signing in.

Three ways to sign in

IB Marker accepts three sign-in methods. You can pick whichever works best for you — they're equivalent in what they unlock.

Email & password

Traditional signup with a verified email address and a password of your choosing. Best when you want full control over the credentials.

Sign in with Google

One-click OAuth via your Google account. Works for both personal Gmail and Google Workspace school accounts.

Sign in with Microsoft

One-click OAuth via your Microsoft account. Works for both personal and school / work Microsoft 365 accounts.

Your email address is your account.

Regardless of which method you choose, your account is keyed on a single email. If you sign up with Google using alex@example.com and later try to register that same address with a password, the system will recognise the conflict and prompt you to sign in the way you originally chose. You can add a password later from Settings.

Signing up with email

1

Fill in the signup form

Visit Signup, enter your email, and choose a password. The password field has an eye toggle for visibility and a strength meter that fills as you type. The only hard rule is length: between 6 and 40 characters. The meter rewards longer passwords that mix cases, digits and symbols, but it is advice, not a gate.

Using a personal email address?

If you type a generic address (Gmail, Outlook, and similar consumer domains), the form warns you before you continue: a school email will be required for full access to school features, and schools that require a matching domain hold non-matching accounts for admin approval. You can still create the account with a personal address — the warning doesn't block you, it just flags it up front. Use your school email if you have one.

2

Check your email

We send a verification link immediately. Click it within a day to activate your account. If it doesn't arrive (check spam first), the verify page has a Resend verification email button.

3

Choose Student or Teacher

After verifying, you'll be asked to pick your role. Students go straight to the dashboard (with or without joining a school). Teachers enter a school code to be associated with their school — pending admin approval where applicable.

Signing up with Google or Microsoft

The OAuth path skips password and verification — the provider has already verified your identity. Click the Google or Microsoft button on the Signup or Login page, approve the consent screen, and you'll be returned to IB Marker as a signed-in user.

What OAuth signups look like

  • No password is set on the account. If you later try to "Forgot password," the same flow will let you set a password for the first time. Useful when you want to log in without OAuth later.
  • Your email comes from the provider. If your school uses Google Workspace and the address ends in your school's domain, the school's auto-join by domain rules (when enabled) will associate you with the right school automatically.
  • One-click on returning visits. You don't need to re-consent every time — click the same OAuth button on the Login page and you're in.
"This account was created with Google / Microsoft" messages.

If you try to sign in with a password on an OAuth-only account, we'll tell you clearly — rather than silently rejecting it as a wrong password. Use the matching OAuth button instead, or run a password reset to add one.

Email verification

Verification confirms you control the email address on the account. Until you verify, you can browse but you can't enter answers for AI marking.

If the email never arrives

  1. Check your spam / junk folder. Look for sender noreply@ibmarker.com.
  2. From the verify page, click Resend verification email. We allow a fresh send a few minutes after the previous one.
  3. If you suspect a typo in the email address, sign up again with the corrected one — the original incomplete account expires automatically.
  4. If you're certain none are arriving, contact support@ibmarker.com with your email address.

Joining a school

If your school is on IB Marker, joining it links your account to your school — a higher AI marking allowance, access to teacher-created assignments, and the school's leaderboards.

1

Get the school code

Ask your IB coordinator or teacher. The code is short and case-insensitive. It's not a password — it's how the system associates your account with the right school.

2

Enter it on the Join School page

During signup, or any time later from Settings > School Access. If you signed up with Google or Microsoft using your school email and your school has auto-domain-matching turned on, you may already be associated — check your dashboard.

3

Wait for approval if required

Most schools have auto-approval on — you're in immediately. Some schools require the admin to verify each joiner. In that case you'll see a pending-approval banner on your dashboard; you can still practice as a schoolless student while you wait.

Schoolless accounts

A school code is not required to use IB Marker — the product is free either way. If you sign up without one, you become a "schoolless" student — unlimited practice questions, a small daily AI marking allowance, badges, leaderboards, and the Insights page. Everything that doesn't specifically need a teacher or class context works.

You can always join a school later from Settings > School Access by entering its code. Your accumulated progress, badges, and bookmarks carry over.

Resetting your password

1

Click "Forgot password" on the login page

Enter the email address on your account. We don't tell you whether the address exists — for privacy, the success message is the same either way.

2

Open the reset link in your email

The link is valid for 30 minutes and can be used once. If you let it expire or you reload the page after using it, request a fresh one.

3

Set a new password

Minimum 8 characters with a mix of letters and numbers. The same form also works for OAuth-only accounts that want to set a password for the first time.

Common account issues

  • "This account was created with Google/Microsoft"

    You're trying to sign in with a password on an OAuth-only account. Click the matching OAuth button instead, or run a password reset to add one to the account.

  • Pending approval banner that won't clear

    Your school admin hasn't approved you yet. Ping your teacher or coordinator; if they can't see you in their pending list, the school code you entered may have rotated — ask for the current one and re-enter it from Settings.

  • You signed up with a personal email and your school shows you as pending

    Your school has Require matching email domain turned on, so an address outside the school domain is not approved automatically. Nothing is blocked: your account waits in the school's pending queue until an admin approves it. To skip the wait, sign up with your school address (your @yourschool.edu address rather than a personal Gmail), or ask your admin to approve you.

  • Account locked out / can't log in

    If repeated wrong passwords have triggered a temporary slow-down, wait a few minutes and try again. If you've lost access to the email on the account, contact support@ibmarker.com with proof of identity — we can transfer the account to a new address.

Security notes

  • Passwords are hashed with a salted PBKDF2-SHA256 scheme. Plaintext passwords are never stored.
  • Reset links are one-shot. The token is cryptographic, valid for 30 minutes, and invalidated on first use. Old links sent before a successful reset are also invalidated.
  • OAuth uses the standard authorisation-code flow with PKCE. We only ever see your email address and display name — not your password.
  • School codes are not passwords — they're enrollment tokens. If yours leaks, your school admin can rotate it; existing students keep access.
  • If you suspect your account has been compromised, run a password reset (which invalidates any existing sessions) and contact support.