
The Security page is where workspace admins and owner manage security policies and compliance settings for the space.
When you require 2FA, every workspace member must have two-factor authentication enabled before they can access the space. Members who already use 2FA are unaffected. Members who don't are blocked until they set it up.
Two-factor authentication adds a second verification step on top of the password. For how an individual member sets up their own 2FA, see → Profile.
Enforcement is immediate and automatic:
Members without 2FA see a setup page when they access the workspace.
They can enable 2FA directly from that page and are redirected back automatically.
Existing sessions are checked on every navigation, so enforcement takes effect right away, not only at the next login.
Go to Settings → Security.
Toggle on Require two-factor authentication.
Members without 2FA are prompted to set it up the next time they access the workspace.
Requiring 2FA affects every workspace member. Make sure your team is prepared before you turn it on, so no one is locked out unexpectedly.
Permissions. Only Admins can change security settings. The change is recorded in the Audit Log.
A member is locked out after I required 2FA.
They are not locked out permanently. On their next navigation they see a setup page where they can enable 2FA and continue. Enforcement lifts as soon as they finish setup.
I don't see the Security page.
Security settings are available on the Pro and Enterprise plans, and only Owners and Admins can open them. Check your plan on the pricing page and your role under Settings → Team.
How do members set up their own 2FA?
Each member enables 2FA on their own account. See → Profile for the step-by-step.