Two-factor sign-in strengthens your account by asking for a temporary verification code from an authenticator app in addition to a password. Organization owners can make this security layer mandatory for every team member.
Require it
- Turn on two-factor on your own personal account first through your profile. Check out Two-factor sign-in for setup steps.
- In Organization settings, scroll to Two-factor and switch on Require two-factor for everyone.
Once enabled, any team member without two-factor will be guided to set it up the next time they sign in before they can enter the dashboard. The Team page displays an active badge reading Two-factor on next to secured members.
A teammate lost their device
If a team member loses their phone, an owner can select Reset two-factor next to their name. Their existing authenticator connection and backup codes will deactivate immediately, and their active sessions will sign out everywhere. When they next log in with their password, Bienvue will prompt them to register a fresh device. To update your own two-factor settings, manage them in your profile.
If it doesn't work
- "Turn on two-factor for yourself first": enable two-factor on your own user profile before enforcing it across your team.
- "Only an owner can change what the organization requires": ask an organization owner to adjust team security settings.