Security · MFA · Administrators
As an account administrator, you can require multi-factor authentication (MFA) for every user of your organization. Each user will then confirm their sign-ins with a one-time verification code sent by email.
Where to find this setting?
Click your profile icon (top right corner) and open Account settings. The option is located in the Multi-factor authentication section.
Required permission: you must be an administrator of the organization.
Required permission: you must be an administrator of the organization.
Enabling MFA for all users
- Click your profile icon (top right) and open Account settings.
- Turn on the toggle Enable multi-factor authentication for your organization.
- Click Save at the bottom of the page.
What happens for your users
- MFA is enabled on every user account of the organization.
- Each user benefits from a 7-day grace period: they can still sign in normally, and a banner shows them the date when MFA becomes mandatory.
- After the grace period, a verification code (valid for 5 minutes, sent by email) is required at every sign-in.
Important
Individual users cannot turn MFA off themselves once it is enforced. If your organization needs to disable it, contact our support team.
If your account belongs to a reseller
Your reseller can also manage MFA for all of its client accounts:
- allow MFA for its client accounts: the administrator of each account then chooses whether to enable it for their users, from Account settings;
- require MFA for all its client accounts and their users: it then applies to your organization without any action on your side, and your users see the banner announcing its activation.