Two-factor authentication
Add an authenticator-app code as a second factor on your account, on top of your password or Google sign-in.
Set it up
Open your profile
Go to your Profile page and find the security section.
Scan the QR code
Click Set up MFA. Scan the QR code with your authenticator app, or enter the provided secret manually if you can’t scan.
Verify
Enter the 6-digit code your app generates to confirm setup. Two-factor authentication is now active on your account.
There are no backup or recovery codes. If you get stuck at the code prompt with no access to your authenticator app, your only option there is to sign out — see “Losing access” below for what to do next.
Signing in with two-factor authentication
Once enabled, signing in is a two-step process: your password (or Google sign-in), then a 6-digit code from your authenticator app. If you’re not enrolled but your workspace requires two-factor authentication, you’ll be prompted to set it up before you can continue.
Workspace-wide enforcement
An Admin can require two-factor authentication for everyone in the workspace, from Settings > Security. Two things to know:
- Once you enable it yourself, it stays on for you — every sign-in asks for a code, even if the workspace doesn’t require MFA. You can turn it off again from your Profile page, but only while the workspace doesn’t require it.
- If your workspace requires MFA for everyone, you’ll see a setup prompt on protected pages until you enroll, and you can’t disable it yourself once you have.
Losing access
If you lose your authenticator app, sign out and contact your workspace Admin. There’s no self-service recovery today — an Admin can disable two-factor authentication on your account, or reset your password, from your user detail page in Settings > Users. That action is recorded in the workspace’s security activity log.