Set up two-factor authentication
Choose how staff sign in and prove who they are.
Two-factor authentication asks for a one-time code as well as a password. Administrators choose which methods are allowed, then each person sets up their own.
Choose the allowed methods
Go to Setup, Business Details, then Security.
Under Allowed login methods, tick the ways staff can sign in. Password is on by default.
Under Approved 2FA methods, choose Authenticator app, Text message or Email.
Click Save changes.
Set up your own code
Open your account Settings and go to Security. Find Authenticator app and follow the steps. When it finishes, save your recovery codes somewhere safe, because they get you back in if you lose your phone.
Limit where staff sign in
Under Security tools, open Allowed login locations and turn on Restrict sign-in to approved locations. Add each country you allow, and list any IP exemptions. Administrators can also review activity through Audit log.
Up next
Next, read Create a custom field.