Security & account
Turn on two-factor authentication
Set up TOTP, store your recovery codes, and require 2FA for everyone in the organization.
- Open Settings → Security and start the 2FA setup.
- Scan the QR code with an authenticator app, or type the key in by hand.
- Enter the six-digit code to confirm. Setup is not complete until you do.
- Save your recovery codes somewhere that is not the same device.
Requiring it for the whole organization
An owner who has 2FA on themselves can require it for the organization. While it is required, a member who has not set it up is asked to before they can finish signing in — including when they sign in with Google.
Refreshing the setup page does not change your key: the secret stays fixed until you complete the setup, so a code you already added to your phone keeps working. Recovery codes are stored encrypted and each one works once.