Organization
Security
Require two-factor authentication from every member of your organization.
- Who
- Owner, Admin
- Where
- Settings → Organization → Security
- How to enable
- Off by default. An owner or admin turns it on.
Two-factor authentication asks for a code from an authenticator app at every sign-in, so a stolen password isn't enough to get into your organization's people data. Each member can turn it on for their own account. The security setting makes it mandatory for everyone in the organization.
How it works
- Turning it on. You have to use two-factor yourself before you can require it, so the setting can't lock you out. The page shows how many members already use it, and its member list shows everyone with whether they've set it up, filterable to those who haven't. While anyone is still missing, owners and admins also see a reminder on the dashboard with the count.
- People already signed in keep working, with a reminder at the top of every page and a link to set it up.
- From the next sign-in, anyone without two-factor has to set it up before they can open the organization. That includes newly invited members. Setup is the same as on the account page: scan a QR code, enter a code, save the backup codes. Afterwards they land back in the organization.
- Google sign-in. Members who sign in with Google enrol too. They don't need a password to set it up, and once it's on, Google sign-in asks for the code as well.
- Staying on. While any of a member's organizations requires two-factor, they can't turn it off on their account.
- Per organization. The rule only applies inside the organization that sets it. If you belong to several, each one decides for itself.
- Turning it off stops new sign-ins from being held at setup. Members who already enrolled keep two-factor until they turn it off themselves.
Good to know
- Platform support staff viewing your organization as a member aren't asked to enrol on that member's behalf.
- Turning the setting on or off is recorded in the activity log.