How do I require two-step sign-in for my team?

Where: Settings → Team & security → Two-step sign-in rules

Open this page: admin.<your-site>/settings/security (replace <your-site> with your site address)

Before you start

• Owners and admins can see this page. Only the site owner can save changes, with a fresh sign-in.

Steps

1. Open Settings → Team & security → Two-step sign-in rules.
2. Read the counts: Active members, Must use it, Have it on, Overdue.
3. Under Required for these roles, tick the roles. We recommend at least Owner and Admin.
4. Set Days to set it up, from 0 to 30. 0 means right away.
5. Save. The page says "Two-step sign-in rules saved."

Good to know

• The page shows "Last changed {when}".
• Overdue members can only set up two-step until they turn it on.
• Each team card in Team shows Two-step sign-in on when a member has it.

Common problems

• "Only the site owner can change these rules."

Questions

Related

• Roles that must use two-step
• Team
• Single sign-on