Enable MFA step by step

MFA (multi-factor authentication) requires a second factor in addition to the password at sign-in: typically a six-digit code generated by an authenticator app.

Enable it for your user

1. Click your avatar (top right) → My account.
2. Tab Security → MFA.
3. Click Enable MFA.
4. Scan the QR code with an authenticator app: 1Password, Authy, Google Authenticator or Microsoft Authenticator.
5. Enter the six-digit code shown by the app.
6. Save the backup codes that appear on screen in a safe place (password manager or sealed envelope). They are shown only once.

Enforce it across the organization

Only the org admin can require MFA for all users.

1. Settings → Security → MFA policy.
2. Switch from Optional to Required.
3. Set the grace period (default seven days).
4. Save.

When a user signs in during the grace period, they will see a banner reminding them to enable MFA. After the grace period, the system enforces it before continuing.