Workspace security
Workspace owners and admins can require every member to enrol an authenticator app for two-factor authentication (2FA). This policy applies to the active workspace.
Require 2FA
Open Settings → Workspace security and turn on Require authenticator-app enrolment. Twelfth gives existing members a 14-day grace period to enrol. After that date, members without an authenticator app cannot use protected workspace access until they finish setup.
New or existing members can enrol from Settings → Security & access. See Security and access for setup steps and recovery code guidance.
This setting requires an authenticator app (TOTP). If your organisation uses Google or enterprise single sign-on, enforce login-time MFA with that identity provider as well.
Before enforcing 2FA
- Tell members when the grace period ends.
- Ask everyone to save recovery codes securely.
- Make sure owners and admins have working authenticator apps before the deadline.
- Keep a supported account-recovery process for people who lose a device.
Turn off the requirement
An owner or admin can turn the requirement off from the same page. This stops workspace enforcement, but it does not disable 2FA for members who have already chosen to use it.