Enforce 2FA across the team

Two-factor authentication (2FA) adds an extra layer of security to the login process. As a reseller admin you can make 2FA mandatory for all employees or per role.

Enforcing 2FA for all employees

1. Go to Settings → Security.
2. Enable 2FA required for all employees.
3. Click Save.
4. Employees who have not yet set up 2FA will be required to link an authenticator app the next time they log in before they can continue.

Enforcing 2FA per role

1. Go to Employees → Roles and open the desired role.
2. Enable 2FA required on the role page.
3. Click Save. Every employee with this role must set up 2FA.

Checking 2FA status

The 2FA status of each employee is visible in the employee overview via the lock icon next to the name. A closed lock means 2FA is active; an open lock means 2FA has not yet been set up.