Turn on two-factor authentication (2FA)
Who: everyone (your workspace may require it for Admins and Super Admins). Go to: Profile → Two-factor authentication.
- Scan the QR code with an authenticator app such as Google Authenticator, Authy or 1Password.
- Enter the 6-digit code to confirm.
From then on, password sign-ins ask for a fresh code. A passkey counts as two-factor too: signing in with one asks for no code (see Sign in with a passkey). Google, Microsoft and Apple sign-ins don't, by design; those providers have their own security. To turn it off, tap Turn off on the same row.
Example: Priya's workspace requires 2FA for managers (Settings → Security). When Tom next signs in, he's asked to set it up. He scans the code with Google Authenticator and types 482 913.