Two-Factor Authentication

Two-Factor Authentication (2FA)

Why Enable 2FA?

Two-factor authentication adds a second verification step beyond your password. Even if someone obtains your password, they cannot access your account without the second factor. We strongly recommend enabling it for all accounts.

Setup

1. Click your avatar in the bottom-left corner of the sidebar and go to Settings.
2. Navigate to the Security section.
3. Click Enable Two-Factor Authentication.
4. Scan the QR code with your authenticator app (Google Authenticator, Authy, 1Password, etc.).
5. Enter the 6-digit verification code to confirm setup.

Recovery Codes

After enabling 2FA, you receive 8 one-time recovery codes. Save these immediately in a secure location (password manager, printed in a safe, etc.). If you lose access to your authenticator app, a recovery code is the only way to log in. Each code can only be used once.

Role-Level 2FA Requirement

When creating or editing a custom role, you can enable Require Two-Factor Authentication. Members assigned this role must have 2FA enabled to access the account. If they have not set up 2FA, they are prompted to do so on login.

Portal 2FA

When inviting a contact to the portal, you can optionally require them to set up 2FA during activation. This adds security for contacts who access sensitive documents and payment information.