Two-factor authentication
Add a second factor and require it for everyone in your workspace.
Two-factor authentication (2FA) asks for a second proof of identity at sign-in, so a stolen password is not enough on its own.
Add a second factor. In Account you can add either an authenticator app or a passkey. Either one satisfies a workspace 2FA requirement, you do not need both.
- Authenticator app. Choose Set up authenticator, scan the QR code with an app like Google Authenticator, 1Password, or Authy, and enter the 6-digit code to confirm. After that, signing in with your password also asks for the current code.
- Passkey. Choose Add passkey to use your device unlock (fingerprint, face, or PIN). Passkeys are phishing-resistant and sign you in in one step.
Require it for your workspace. Admins can turn on Require two-factor authentication in Settings, Advanced. When it is on, every member is prompted to add a factor the next time they open the workspace, and cannot continue until they do. Members who already have a passkey are covered automatically.
Lost your device? A workspace admin cannot reset your factors, but a platform administrator can clear them so you can sign in and set up 2FA again. Contact support at the address on the marketing site.