Two-factor login and passwords

Turn on two-factor login, reset a forgotten password, and keep staff accounts safe.

Two-factor login means a stolen password alone can’t open your account. Turn it on for every office, director and leader account — it takes two minutes.

Turn on two-factor login

  1. Install an authenticator app on your phone, such as Google Authenticator or Authy.
  2. In the workspace, open your own profile and press Set up next to Two-factor sign-in.
  3. Scan the QR code with the authenticator app. Can’t scan? Type in the key shown under the code instead.
  4. Enter the 6-digit code the app shows to confirm. From now on, sign-in asks for a fresh code after your password.
Office admins can see how many staff logins use two-factor login under Settings → Security. Each person turns it on from their own account.

New phone or lost phone

Before you change phones, turn two-factor login off from your profile (it asks for a current code), then set it up again on the new phone. If the old phone is lost or wiped, contact support so we can confirm it is you and help you back in.

Password rules

  • At least 10 characters, with upper and lower case letters and a number.
  • Passwords known from data leaks are refused.
  • Your company can require a 6-digit email code before anyone changes their own password.

Forgot your password

Use Forgot password on the sign-in page; the reset link goes to the registered email. Workers without an email ask the office, which resets it from the user’s profile.

Good habits

  • One login per person — never share accounts.
  • Deactivate users who leave the company the same day.
  • Give each person the smallest role that does the job — see roles.

Was this helpful?

Related articles