Keep your account secure
Two-factor authentication, passkeys, sessions and account-wide security rules.
1Turn on two-factor authentication
Your settings → Security. Scan the code with an authenticator app, and keep the recovery codes somewhere safe.
2Add a passkey
On the same page, add a passkey to sign in with your device’s fingerprint, face or PIN.
3Check your sessions
Your settings → Sessions lists where you’re signed in and your recent sign-ins. Sign out anything you don’t recognise. Export CSV downloads the sign-in history, and Clear history forgets it.
4Set rules for everyone
Owners can require two-factor authentication, limit sign-in to certain email domains or IP addresses, sign people out after a period of inactivity, and set up single sign-on, all from Account → Security.
5Provision people from your identity provider
On Account → Security, turn on SCIM provisioning and copy the base URL and token into Okta or Microsoft Entra ID. People you assign the app to join with the role you choose; unassigning or deactivating them removes them, and reactivating brings them back. The last owner is never removed.