Multi-factor authentication (MFA) adds a second verification step when a user signs in, on top of their password. To manage it, an administrator goes to Settings and opens the Users tab, where each user's MFA can be viewed and turned on or off. Managing MFA for other users requires an administrator role.
Check a user's MFA status
On the Users tab, the MFA Status column shows whether each user has MFA set up.
MFA Status | What it means |
Enabled | The user signs in with multi-factor authentication. |
Disabled | The user signs in with their password only. |
Turn MFA on or off for a user
From a user's row, open the Actions menu and choose:
Enable MFA: the user must verify with an authenticator app when they sign in. If they have not set one up yet, they are prompted to register an authenticator the next time they sign in.
Disable MFA: removes the requirement, so the user signs in with their password only.
Only one of these appears, depending on the user's current MFA status.