Skip to content
Start free

Two-factor authentication and security policies

Turn on an authenticator app, and require it for everyone in your organization.

Open Settings → Security and choose Set up authenticator app. Scan the QR code with an app such as 1Password, Google Authenticator or Authy, then enter the 6-digit code to turn it on. From then on, wrkflow asks for a code at sign-in.

Require it for everyone

Owners can require two-factor for the whole organization in Settings → Sign-in and access. Members without it are asked to set it up the next time they open the organization, before anything else. The same page shows how many members already have it on.

Allowed email domains

Also in Sign-in and access, list the email domains people may join from. Invitations and new memberships outside those domains are refused; people already in the organization stay.

Required two-factor and allowed domains are on the Team plan. If you forget your authenticator, a password reset for an account with two-factor still asks for the code first, so a stolen password alone can't take over the account.

Still stuck? Talk to us and we’ll help you sort it out.