Multi-Factor Authentication (MFA)

Why MFA Matters

MFA adds a second verification step to reduce risk from stolen passwords and unauthorized access.

Enable MFA

1. Open Settings.
2. Go to MFA.
3. Click Enable MFA.
4. Scan the QR code with your authenticator app.
5. Enter the one-time code to verify setup.
6. Save your recovery codes in a secure location.

Daily Sign-In Flow

1. Sign in with email and password.
2. Enter the authenticator code when prompted.
3. Use a recovery code if your authenticator is unavailable.

Managing MFA

• Rotate your authenticator device if your phone changes.
• Regenerate recovery codes after a suspected exposure.
• Disable and re-enable MFA only when necessary.

Team and Security Guidance

1. Require MFA for admin and manager roles.
2. Review access roles regularly.
3. Audit sign-in activity for unusual behavior.

Related Topics

• Settings Overview
• Roles and Permissions
• Organization Settings