Two-Factor Authentication
Add an extra layer of security with 2FA
Two-factor authentication (2FA) adds a second verification step beyond your password. Even if someone gets your password, they can't access your account without the second factor.
How 2FA Works
- Enter your email and password
- Open your authenticator app
- Enter the 6-digit code
- You're logged in
The code changes every 30 seconds, so even if someone sees it, they can't reuse it.
Enabling 2FA for Your Account
Open Account Settings
Go to Settings Account Two-Factor Authentication.
Scan the QR Code
Open your authenticator app and scan the QR code displayed. Supported apps:
- Google Authenticator
- Authy
- 1Password
- Microsoft Authenticator
- Any TOTP-compatible app
Verify Setup
Enter the 6-digit code from your app to confirm it's working.
Save Backup Codes
You'll receive backup codes. Save these securely — they let you log in if you lose access to your authenticator app.
Store backup codes in a secure location separate from your password. You'll need them if you lose your phone or can't access your authenticator app.
Using Backup Codes
If you can't access your authenticator app:
- Click Use backup code on the 2FA screen
- Enter one of your backup codes
- You're logged in
Each backup code can only be used once. After using a code, generate new ones.
Regenerating Backup Codes
- Go to Settings Account Two-Factor Authentication
- Click Regenerate Backup Codes
- Save the new codes securely
- Previous codes are invalidated
Requiring 2FA for Your Organization
Admins can require all members to use 2FA:
Open Organization Settings
Go to Settings Organization Security.
Enable Requirement
Toggle Require Two-Factor Authentication.
Set Grace Period
Choose how long members have to enable 2FA:
- Immediate — Must enable before next login
- 7 days — Week to comply
- 30 days — Month to comply
Notify Members
Members without 2FA receive email notifications about the requirement.
What Happens When 2FA Is Required
- Members without 2FA are prompted to set it up at login
- After the grace period, they can't access the platform until 2FA is enabled
- Admins can see who has/hasn't enabled 2FA in the Members list
2FA Status
View 2FA status for your organization:
- Go to Settings Members
- See the 2FA column:
- ✓ Enabled
- ✗ Not enabled
- ⏳ Grace period (if required)
Disabling 2FA
For Your Account
- Go to Settings Account Two-Factor Authentication
- Click Disable 2FA
- Enter your password to confirm
If your organization requires 2FA, you cannot disable it on your account.
For Another Member (Admin)
If a member loses access to their 2FA:
- Go to Settings Members
- Find the member
- Click Reset 2FA
- They'll need to set up 2FA again at next login
Troubleshooting
| Issue | Solution |
|---|---|
| Codes not working | Check your phone's time is correct (auto-sync recommended) |
| Lost phone | Use a backup code, then reconfigure 2FA on new device |
| No backup codes | Contact an admin to reset your 2FA |
| App deleted | Reinstall and reconfigure using backup codes |
Best Practices
- Use a reputable authenticator app — Avoid SMS-based 2FA when possible
- Store backup codes securely — Password manager or secure document
- Keep your phone updated — Security patches protect your authenticator
- Enable on all accounts — 2FA should be standard, not optional