Require two-factor authentication

For org owners and admins

Org owners and admins can require two-factor authentication for everyone in the org. Then nobody uses the org with only a password: each person needs an authenticator app too. It’s in Settings → Security, on phones too.

Turn it on#

1. Set up two-factor for your own account first, and sign in with it. Until you do, the switch says “Turn on two-factor for your own account first.” See Two-factor authentication.
2. Open Settings → Security and turn on Require two-factor authentication.
3. The confirmation says how many members haven’t set it up yet. Select Require.

From that moment, members who haven’t set it up see the org with a lock and Two-factor required. When they pick it, the app walks them through setting it up, which takes about a minute. Until then the org doesn’t open for them; their other orgs still do.

Below the switch, the page lists the members without two-factor, such as “2 members without two-factor”, so you can follow up.

What it doesn’t change#

• Agent tokens keep working. Agents and other AI tools that use a token don’t sign in with a code.
• While an org requires it, its members can’t turn off their own two-factor.

Turn it off#

Turn off Require two-factor authentication and confirm with Stop requiring. Members can then use the org with only a password, unless they turned two-factor on themselves.

If someone loses their phone#

They can sign in with one of their recovery codes. If they have no recovery codes either, ask buildIt.social support: owners and admins can’t reset someone’s two-factor themselves.