Strengthen your organization’s security posture by requiring all members to enable two-factor authentication (2FA) before accessing sensitive financial data.
Key Benefits
- Enhanced Security: Protect against unauthorized access even if passwords are compromised
- Admin Control: Organization owners and admins decide when to enforce 2FA
- Immediate Effect: Enforcement takes effect instantly—members without 2FA are prompted to set it up
- Compliance Ready: Meet security requirements for SOC 2, ISO 27001, and financial regulations
- Flexible Management: Enable or disable enforcement based on your organization’s needs
How It Works
For Administrators
- Navigate to your organization’s security settings
- Toggle “Require 2FA for all members” (must have your own 2FA enabled first)
- Enforcement activates immediately for all current and future members
For Members
When 2FA is required:
- Existing members without 2FA see a prompt to set it up before accessing the workspace
- New members can accept invitations but must enable 2FA before viewing projects
- Members with 2FA enabled continue working without interruption
Safety Features
Our 2FA enforcement includes comprehensive safeguards to prevent lockouts and maintain security:
- Pre-Enforcement Validation: Admins must enable their own 2FA before requiring it for the organization
- Admin Protection: Admins and owners cannot disable their own 2FA while managing organizations with enforcement active
- Access Control: Members without 2FA are automatically blocked from accessing organization resources
- Login Warnings: Users are notified at login if they belong to organizations requiring 2FA
- Organization Switching: Prevents switching to organizations requiring 2FA until it’s enabled
- Ownership Transfer Safeguards: Ownership can only be transferred to users with 2FA enabled
- Role Protection: Members cannot be promoted to Admin/Owner roles without 2FA enabled
- Member Addition Validation: Existing users cannot be added as Admin/Owner without 2FA enabled
- Audit Trail: All enforcement changes are logged for compliance and security monitoring
Use Cases
Regulated Industries
Financial institutions, accounting firms, and crypto funds often require 2FA to comply with regulatory standards.
Multi-User Teams
Organizations with multiple team members benefit from enforced 2FA to prevent security vulnerabilities from weak passwords.
Client Requirements
Service providers can meet client security requirements by demonstrating organization-wide 2FA enforcement.
Available Plans
2FA Enforcement is available on Professional and Enterprise plans.