Enforcing MFA

Enforcing multi-factor authentication (MFA, sometimes called 2FA) requires all users in your team to have an additional authentication method alongside their passwords, such as an authenticator app, SMS, or a password manager. Here's how:

1. Open Team settings from the ⋯ menu next to your team name, at the top of the sidebar

2. Open the Security tab

3. Tick "Enforce multi-factor authentication for users"

4. Click "Save changes"

Note that this only enforces MFA for users logging in using a username and password, and not if they log in using SSO (which may require MFA itself).