How to let your clients use two-factor authentication
Use the Allow two-factor authentication switch so clients can protect their accounts with an authenticator app.
Two-factor authentication adds a 6-digit code from an authenticator app to sign-in. On the Agency plan, one switch decides whether the clients of your organization can turn it on for their own accounts. It does not make anyone use it.
Steps
Open Settings. Open the Settings page of your Agency organization.
Find Platform settings. Look for the card titled Platform settings.
Check Allow two-factor authentication. The switch shows as on unless it has been turned off. Turn it on to offer an authenticator app to clients, or off to stop offering it.
There is no Save button. The switch saves as soon as you flip it, and an error message appears if it could not be saved.
What your clients see
Under the switch, the row tells you clients "see it under Personal account". There a client finds a Multi-factor authentication card, which is the same feature as two-factor authentication. Its Authenticator app row has a switch. When the client turns it on, a QR code and a text secret key appear, and the client types the 6-digit code from the app to finish. A wrong code shows "That code did not work. Try the next one." When it works, the client sees "Authenticator app turned on." The client can turn it off again from the same card.
Which plans show the switch
Only organizations on the Agency plan see the Allow two-factor authentication row. On Free and Pro it is not shown.
What happens next
Clients who want the extra protection turn on the authenticator app under Personal account.