2FA
How to set up 2FA and which apps you can use
→ Open profile & 2FA · Open security settings
2FA (two-factor authentication) adds a second proof to your password that only you can produce – such as a code from an authenticator app. That keeps your account protected even if your password leaks, because without the second device access is far harder.
Enforced by admins
In the organisation settings, 2FA can be made mandatory – you'll find the security tab here. More on this in Security settings. After you toggle the option, every member is shown the 2FA setup page automatically at their next login, so no one has to work without a second factor.
Enabled by individual users
If you want to secure your account yourself, open your personal settings and enable 2FA there. Follow the instructions and scan the QR code with an authenticator app of your choice. After saving, you'll be asked for the code at your next login.
Recommended authenticator apps
- Google Authenticator – widely used, lightweight, codes stored locally.
- Microsoft Authenticator – additionally offers backup options and push notifications.
- Authy – syncs accounts across multiple devices and offers encrypted backups.
- FreeOTP – open source, ideal if you prefer free software.
Hardware tokens or devices like YubiKey also work as long as they support TOTP (time-based one-time password). What matters is that you keep the app or device safe and make a backup of your recovery codes.
Related topics
- Security settings — enforce 2FA organisation-wide for your whole team
- Personal settings — manage your profile, language, notifications and two-factor sign-in
- Security — an overview of architecture, deployment and safeguards
- Users & roles — invite staff, assign roles and control permissions
How is this guide?