Requiring two-step sign-in

Set up two-step sign-in with an authenticator app, then make everyone in your company use it.

What's in this video

1. Two-step sign-in means a password alone isn't enough to get in. People also type a code from an app on their phone. Start with your own. Click your initials at the top, to open Settings.
2. Under two-factor authentication, click Turn on.
3. Open an authenticator app on your phone, such as Google Authenticator or Microsoft Authenticator, and scan this code. We've blurred it in this video. Then type the six-digit number it shows.
4. Click Turn on. You'll see some backup codes. Keep them somewhere safe: each one gets you in once if you ever lose your phone. We've blurred them here too.
5. Now you can make everyone in your company use it. Go to Governance, then Company settings, and open the Security tab.
6. Find Require two-step sign-in. It tells you how many of your people already use it. Switch it on.
7. Anyone who hasn't set it up yet is signed out, and asked to set it up the next time they sign in. Nobody can turn it off for themselves while it's on.