Two-factor authentication (MFA) adds a second layer of security to your login: after your password, access link or Google or Microsoft sign-in, you enter a 6-digit code generated in your authenticator app.
Available on: All plans.
Who can do it: Each user turns on their own. Only admins require MFA for the account and reset another person's MFA.
What you need before you start
-
An authenticator app on your phone, such as Google Authenticator, Microsoft Authenticator or 1Password
-
A safe place to store your recovery codes
Turn on MFA for your account
-
Open My profile → Two-factor authentication
-
Click turn on and scan the QR code with your authenticator app
-
Enter the 6-digit code shown in the app
-
Save the 10 recovery codes. They're shown only once
To turn it off, go back to My profile → Two-factor authentication.
Require MFA for the whole account (admin)
-
Turn on MFA for your own account first. Without it, the option stays locked
-
Go to Settings → Users
-
Turn on Require MFA
Once it's on, anyone who doesn't have MFA yet is signed out and must turn it on at the next login. The MFA column in the users table shows who has already turned it on.
I lost my phone and my recovery codes
Ask an admin of your workspace. In Settings → Users, they open your user's menu and click Reset MFA. Then you sign in and turn on MFA again.