Two-factor authentication

With two-factor authentication, you need both your password and a code from your phone to log in. Even if someone knows your password, they can't get in without your phone.

The video shows how to turn it on for yourself, and how an administrator can require it for everyone in the company. Below, you can read how to do it.

How to do it

1. Open Security. Go to Settings and choose the "Security" tab. Under Two Factor Authentication you see whether it's on.
2. Start the setup. Click "Enable". A QR code appears.
3. Scan the QR code. Open an authenticator app on your phone, such as Google Authenticator or Microsoft Authenticator, and scan the QR code. The app shows a six-digit code that changes every 30 seconds.
4. Confirm with the code. Enter the current code from the app and click "Verify". It now says "Enabled".
5. Require it for the whole company. If you're an administrator, go to Company profile, the "Configuration" tab, and tick "Enforce Multi-Factor Authentication". Colleagues without two-factor authentication must then set it up the next time they log in with their email and password.

Good to know

• Under Company profile, the "Users" tab, you can see who has turned on two-factor authentication. When it's required, colleagues who haven't set it up show as "Required".
• If a colleague loses their phone, an administrator can click "Reset 2FA" next to them. They can then log in without a code and set it up again.
• If you change phones, click "Re-configure" under "Security", scan the new QR code and confirm with a code from the new phone.
• Two-factor authentication applies when you log in with your email and password. If you log in with Google or Microsoft, the security of that account protects your login.

Questions and answers

Which app should I use?

You can use any authenticator app that can scan a QR code, such as Google Authenticator or Microsoft Authenticator. The codes are made in the app on your phone.

What if I lose my phone?

Ask an administrator in your company to click "Reset 2FA" next to you under Company profile, "Users". You can then log in without a code and set up two-factor authentication again on your new phone.