Help Center · Account & security
Requiring two-step verification for your organization
Out of the box, two-step verification is optional and each person decides for themselves. If you'd rather everyone in your organization use it, you can require it, and we'll take care of making sure each member sets it up.
Who can turn it on, and where
Owners and Admins of the organization. Open the organization's settings, choose Security, and change two-step verification from Optional to Required. We'll ask you to confirm, and the confirmation explains what your members will see. Members who aren't Owners or Admins can see the setting but can't change it. Every change is recorded with who made it and when.
What members will see
Nothing changes for members who already have two-step verification on. Everyone else will be asked to set it up the next time they sign in, before they reach the app. It's the same setup anyone gets when they turn it on themselves, and they can pick any method. A quick heads-up to your team beforehand, with a link to authenticator apps, goes a long way toward making it painless.
Allowing remembered browsers
Normally, a member can tick Remember this browser for 30 days on the code screen so we don't ask for a code on that browser again for a month. On the same Security page you can turn that option off for your organization. When you do, every browser your members had remembered is forgotten straight away, and everyone is asked for a code at every sign-in from then on. Most organizations leave it on. Turn it off if your own policy says a code is needed every single time.
Organizations that sign in through their own identity provider
If your organization signs in through its own identity provider (Microsoft Entra, Okta, Google Workspace, and so on), your provider manages sign-in security, not us. The Security page shows this and is read-only, and members' Sign-in & security pages say the same. Set your two-step requirement in the identity provider instead.
Bring us the problem everyone works around.
If your team burns hours on work that software should be doing, tell us about it. One of our products may already cover it. If not, we'd like to hear what's missing.