Two-factor authentication (2FA) adds a second step to signing in. As well as a password, you enter a 6-digit code from an authenticator app on your phone. Even if someone's password is stolen or guessed, they cannot get into the account without that code. Requiring 2FA for your team means every person with access to your sites and environments is protected this way, not just the people who choose to turn it on.

Turning on the requirement takes effect immediately. Any team member who does not already have 2FA is signed out straight away and must set it up before they can access the team again. You also need 2FA on your own account before you can turn on the requirement. It is worth letting your team know before you make the change.

In this article, you will find how two-factor authentication works in Levamo, who can require it, and step-by-step instructions for setting up and managing 2FA on your own account, requiring it for your team, and resetting it for a team member.

Two-factor authentication is set up on each person's Levamo user account. Once it is on, signing in requires both a password and a code from an authenticator app, such as Google Authenticator or 1Password.

When you set up 2FA, you also receive eight backup codes. Each backup code lets you sign in once if you lose access to your authenticator app. Store them somewhere safe, such as a password manager. You can view them again later from the Security tab of your account settings after entering your password.

The 2FA column on the Team page shows whether each team member currently has two-factor authentication On or Off.

If you are turning on the requirement for your team and do not have 2FA yet, you will see a prompt in Team settings asking you to set it up first. Team members who are required to set up 2FA see the same setup screens after signing in.

Click Team in the top navigation menu, then Team settings. In the Two-factor authentication section, click Set up two-factor authentication.

If you have been signed out because your team now requires 2FA, the Set up 2FA screen appears automatically after you sign in.

Open your authenticator app and scan the QR code on screen. If you cannot scan it, enter the setup key shown below the QR code into the app manually. Click Continue.

Enter the 6-digit code shown in your authenticator app, then click Verify & enable.

Save your eight backup codes using Copy or Download, and store them somewhere safe. Then click Done, or Continue to dashboard if you were prompted after signing in.

Once two-factor authentication is on, you can manage it from the Security tab of your account settings. To open it, click Edit account from the menu in the top-right corner of the dashboard, then select Security.

The Two-factor authentication (2FA) section shows whether 2FA is on and the date it was added. From here you can:

The Authentication section on the same tab shows the email address on your account and a Reset password button. To change your email address, contact our support team.

Log in to your Levamo dashboard, click Team in the top navigation menu, then click Team settings.

In the Two-factor authentication section, turn on Require two-factor authentication.

The section shows how many team members already have 2FA enabled, and how many must enroll before they can access the team.

Click Save changes in the Two-factor authentication section. A confirmation appears showing how many members must enroll to keep access.

To remove the requirement, follow the same steps, turn the setting off, and save.

Reset a team member's 2FA if they have lost access to their authenticator app and backup codes, or if you suspect their account has been compromised.

On the Team page, click the ⋯ menu next to the team member. The option only appears for members who have 2FA turned on, shown as On in the 2FA column.

Click Reset 2FA.

In the confirmation window, click Reset two-factor authentication.

The team member is signed out everywhere and must set up 2FA again before they can access the team. This cannot be undone.

A team you belong to now requires two-factor authentication. Follow the steps on screen to set it up, then you can continue to the dashboard.

Use one of your backup codes in place of the 6-digit code. If you do not have your backup codes, ask your team owner, a Super Admin, or an Administrator to reset your 2FA, then set it up again on your new device. If you are the team owner, contact our support team.

At least one team you belong to requires two-factor authentication, so the Disable option is unavailable. If you need to turn it off, ask that team's owner, a Super Admin, or an Administrator whether the requirement can be removed.

Any authenticator app that supports QR code setup works, including Google Authenticator and 1Password.

You need 2FA on your own account first. Click Set up two-factor authentication in the Two-factor authentication section of Team settings, complete setup, then turn on the requirement. You also need to be the team owner, a Super Admin, or an Administrator.

Requiring two-factor authentication is one of the simplest ways to protect your team and the sites it manages. Set it up on your own account, let your team know, then turn on the requirement in Team settings.

If you have questions about two-factor authentication or need help regaining access, our support team is available 24/7.