Two-factor authentication adds a second check beyond your password. Strongly recommended for anyone with admin access or access to sensitive data (Finance, HR, Contracts). Takes about 2 minutes to set up.
Set it up
- Top-right avatar > Profile > Security tab > Two-factor authentication > Enable
- Pick your method: Authenticator app (recommended - Google Authenticator, Authy, 1Password, etc.) or SMS
- For authenticator app: scan the QR code with your app, type the 6-digit code it generates to confirm
- For SMS: enter your phone number, type the SMS code you receive
- Save your recovery codes (the platform shows 10 one-time codes - download or write them down somewhere safe)
Recovery codes are your only path back in if you lose your phone. Treat them like passwords - never store them in plaintext on your laptop, never paste them in chat. Each code works once; the platform shows how many you have left after each use.
Lost your phone?
Use one of your recovery codes to log in. From there, go back to Profile > Security and either reconfigure 2FA with your new device, or disable 2FA temporarily. If you've lost the recovery codes too, contact your Org Admin - they can reset 2FA on your account after verifying your identity.
Tenant requirements
Some tenants require 2FA for all users (Org Admin sets this in Admin Settings > Security > Require 2FA). If your tenant requires it, you'll be prompted to set it up on next login - you can't skip it.