Set the company sign-in policy
Email codes remain required; Authenticator adds a second check.
Choose who needs Authenticator
- Open Security.
- Enable or disable the additional Authenticator requirement.
- When enabled, choose administrators only or all users, then save.
- If asked, confirm the change with a fresh code from your Authenticator app. A code already used to sign in cannot be reused.
What employees experience
Email sign-in codes remain mandatory for everyone. A person covered by the Authenticator rule sets up an authentication app when prompted and then enters its code at sign-in.
Tightening the policy can also require an additional check in sessions that are already open.
If someone loses their phone
Do not ask the person to share their setup key or another person’s codes. Use your usual support channel to arrange access recovery. The current company interface does not provide an administrator button to reset another person’s Authenticator.