Turn on two-factor authentication
Under your account's settings, open Two-factor authentication and choose Enable two-factor authentication. Scan the QR code with an authenticator app, or enter the key into it by hand, then enter the six-digit code the app shows and select Confirm setup. The factor is on when the code is accepted.
From then on every sign-in — with your password, through a social provider, or through single sign-on — asks for a code after the first step.
Recovery codes
Recovery codes are listed on the same page. Save them somewhere safe: each one signs you in once when the app is not at hand.
- Generate new recovery codes replaces them.
- Disable two-factor authentication removes the factor.
If you lose the device and have no recovery codes, contact support.
Require it of everyone
A workspace owner can make the factor compulsory. On the workspace's Organization page, switch on Require a second factor of everyone. A member without one is sent to enrol before anything in that workspace opens.