Multi-Factor Authentication (MFA) adds an extra layer of security to your workspace by requiring users to verify their identity during sign-up and login. This helps protect your company’s data and ensures only authorized users have access to your workspace.
In this article:
Key facts
MFA is controlled at the workspace level and must be enabled by a workspace admin. Once turned on, MFA applies to all members of that workspace, prompting them to set up and use an additional verification method when logging in.
- Controlled at the workspace level: MFA settings are specific to each workspace. If you belong to multiple workspaces, each one must have its own MFA configuration.
- Actioned on a per workspace basis: Enabling or disabling MFA in one workspace does not affect other workspaces.
- Switched on by admins: Only admins have permission to enable or disable MFA for a workspace.
- Reset by admins: If a member loses access to their authentication method (for example, if they change devices), an admin can reset their MFA setup so they can reconfigure it.
- Prompted during sign-up and login: Once MFA is enabled, users will be prompted to complete MFA setup when they’re invited to join the workspace, and each time they log in thereafter until setup is complete.
Enabling MFA
To set up MFA, make sure you're an admin in your workspace. Then:
- Go to Settings > General.
- Locate the Multi-Factor Authentication (MFA) section.
- Toggle on Require MFA for all members.
- All users will be prompted to set up MFA the next time they log in or when accepting an invitation to the workspace.
Resetting a user's MFA
If a user cannot access their account due to MFA issues:
- Navigate to Settings > Members.
- Find the affected user.
- Select Reset MFA from the user’s menu.
- The user will be prompted to reconfigure MFA the next time they sign in.
FAQ
Q: Do I need to enable MFA in every Workspace I belong to?
A: Yes. MFA is controlled on a per-workspace basis. Each workspace’s admins determine whether MFA is required.
Q: What happens if I disable MFA in my workspace?
A: Users will no longer be prompted for MFA when logging in to that workspace.
Q: Can I enforce MFA for specific roles only?
A: At this time, MFA can only be enabled for the entire workspace, not for specific roles.