How to Configure Two-Factor Authentication Settings

Learn how to enable 2FA, set trusted device duration, and generate bypass codes for your organization. This guide is for administrators.

Accessing 2FA settings

1. Go to Settings in the navigation menu.
2. Click Two-Factor Authentication.

Enabling or disabling 2FA

Turn two-factor authentication on or off for your entire organization.

Trusted device duration

You can allow or disallow trusted devices. 

Choose how long a trusted device is remembered before users are asked for a verification code again:

• 30 days
• 60 days
• 90 days
• Always remember — code required only once per device

Generating admin bypass codes

If a user can't receive their SMS verification code and needs urgent access:

1. Go to the user's profile in the admin portal.
2. Click the 3 dots in the upper right corner and select the option to generate a one-time 2FA bypass code.
3. Share the code with the user to enter at login when prompted.

Note: If the user hasn't registered a phone number yet, this will return "not registered." The user needs to complete phone registration first by signing in normally.