Workspace owners and admins can require multi-factor authentication for shared workspace access. This policy adds account verification to the workspace's membership and subscription requirements.
Prepare your account first
Open Security settings and set up an authenticator app for your account. Complete the enrollment and keep your backup codes somewhere you can recover them.
You must enable your own two-factor authentication before turning on the workspace requirement. If the workspace already requires MFA, you must also have a verified session to change its policy.
Enable the workspace requirement
- Open My Team and select the intended workspace.
- Open its settings and the General section.
- Find Workspace security.
- Turn on Require multi-factor authentication and wait for the save to complete.
Only workspace owners and admins can change this policy. A regular member must ask an owner or admin to configure it.
What teammates need to do
When the policy is enabled, teammates need a verified second factor to access the workspace. An account without the required verification is blocked from protected workspace access.
If Set up MFA appears, open it and complete account setup. Someone who already enabled MFA may need to sign in again and complete verification. The policy concerns account access; it does not replace signer identity verification or journal encryption setup.
MFA does not assign a subscription or change a teammate's role. Manage those separately using Team Workspace Subscription Management.
Change the policy later
An authorized owner or admin can return to Workspace security to change the requirement. When it is already enabled, complete second-factor verification before changing it. Policy updates are recorded in the workspace's security audit records.
If a change is rejected, check your workspace role and account verification, then ask support for help if needed.
Return to Business Suite guides.