Docs menu Account & security

Requiring two-factor for your team

Enforce 2FA account-wide, watch enrollment, and rescue locked-out users.

On this page
  1. Rolling out a requirement
  2. Rescuing a locked-out user

Personal two-factor is each user's choice — until your organization decides it should not be optional. Managers control account-wide policy from Security.

Rolling out a requirement#

  1. Announce it first — a heads-up week saves support tickets.
  2. Toggle Require two-factor. From then on, every user must enroll before continuing past sign-in.
  3. Watch the enrollment table — it shows exactly who has factors set up and who has not.

Rescuing a locked-out user#

  • Support reset clears their factors so they can re-enroll fresh at next sign-in.
  • Verify identity first — a reset request is exactly what an attacker would also ask for. Call them back on a known number.
  • Resets are recorded in the activity log.

Note: Policy lives here; personal factors live on each user's own Profile. Security manages the rule, never other people's secrets.

Can’t find what you need? Email [email protected] or call (855) 248-2464. We answer 8am to 8pm Central Time, 7 days a week.