Access & AccountAdmins and any user required to use 2FAtwo-factor-authenticationValidated 73a3bb9
Complete two-factor verification before you rely on it
Enroll in 2FA from Settings, verify the challenge flow, and store recovery information before the next sign-out.
Before you start
Finish enrollment and test the challenge in one sitting so you do not leave the account half-configured.
- You can sign in with email and password.
- Your authenticator app or supported verification device is available.
When to use this article
- You are hardening a new admin account.
- Security policy now requires a second factor.
- You want to confirm the challenge works before logging out for the day.
Applies to
- Workspace security
- Settings
Roles
- Admin
- Manager
Enroll from Settings
- 1
Sign in and open Settings.
- 2
Locate the two-factor section and start enrollment.
- 3
Scan the QR code or copy the setup key into your authenticator app.
- 4
Enter the generated code and save the recovery information.
Prove the challenge flow works
- 2
Sign out after enrollment completes.
- 3
Sign back in with email and password.
- 4
Enter the six-digit challenge code.
- 5
Continue only after the app returns you to a valid workspace route.
Expected result
- The account is enrolled in two-factor verification.
- A fresh sign-in shows the challenge page and accepts the verification code.
Troubleshooting
- If the enrollment page cannot find a buyer or workspace, re-select scope from the landing page first.
- If codes fail repeatedly, verify the authenticator clock is synced and restart enrollment.
- Keep recovery codes outside the app so you are not blocked during the next session.
Guided screenshots
Reference views for this workflow.
