Security and two-factor
Require two-factor for your team and clients
On Ultimate, require two-factor authentication for team members, clients or both, how the three-day grace period works and what people see.
On this page
Owners and Admins can make two-factor authentication (2FA) compulsory for the workspace. This is part of the Ultimate plan.
Turn it on
- Set up 2FA for your own account first; SocialApp asks you to if you have not.
- Open Settings, then Security, and find Enforce two factor authentication (2FA).
- Under Enforce 2FA for, tick Team Members, Clients or both, and switch it on.
Turning enforcement off again asks for your password.
The grace period
People who do not have 2FA yet get 3 days from the day enforcement starts to set it up:
- During those days, a Setup 2FA window appears on every page with the days left. They can close it and continue.
- After the 3 days, the window cannot be closed and the page behind it cannot be used until they set up 2FA. The setup runs inside the window, so it takes a minute.
When they sign in, SocialApp asks them to set up 2FA as part of the sign-in.
What it does not change
People who already use 2FA notice nothing. Support sessions of the platform's team are not affected. People covered by enforcement cannot turn their own 2FA off; the Security tab says that the organisation requires it.