Requiring two-factor for your whole team

The Owner can require everyone who signs in to your admin to use an authenticator app. Turning it on does not lock anyone out straight away.

Where to find it

Settings → Security, in the Require two-factor for everyone card.

The Team MFA policy section with the Require two-factor auth setting

How it works

• Currently — shows "not required", or "required" with the date nobody is stopped until during the grace window.
• Require two-factor (14-day grace period) — the Owner's button to switch it on. Renta confirms "Two-factor is now required. Your team has 14 days to set it up before anyone is stopped."
• Stop requiring two-factor — the same button once it is on. Renta confirms "Two-factor is no longer required for your team."
• Only the Owner can change it. Everyone else sees "Only the account owner can change this."

What your team sees

During the 14 days, people who have not set up an authenticator see a banner each time they sign in: "Two-factor login becomes required for this business on [date]" with a Set it up now link. When the 14 days are over, anyone still without one sees a Start setup screen they cannot get past until they finish (it has a Sign out link). People who are set up are asked for their 6-digit code.

Example

You switch it on today. Your two Staff members set up their phones during the week. On day 15 a new hire who never did it is stopped at the Start setup screen until they scan the code.

Good to know

• The 14 days are fixed; there is no setting for a different length.
• Each person can set up their own authenticator any time, even before you require it (see Setting up two-factor login).
• For more quick answers see Common questions: two-factor login and security.