Multi-factor authentication setup and management. Required for privileged roles, recommended for all users.
| Method | Security Level | Setup |
|---|---|---|
| Authenticator App (TOTP) | High | Scan QR code with Google Authenticator, Authy, or 1Password |
| SMS OTP | Medium | Enter phone number, receive 6-digit code per login |
| Email OTP | Medium | Receive 6-digit code at registered email |
Required Roles
MFA is mandatory for: Platform Administrators, Tenant Owners, Tenant Admins, Finance roles, Trust & Safety roles. Accounts without MFA will be prompted on every login.
Certain high-risk actions require MFA re-verification even during an active session: