Skip to main content
Add a second verification step to your sign-in, and optionally require it for everyone in your workspace.

​
Before you start

  • You need an authenticator app that supports TOTP (for example Google Authenticator or Authy). If your workspace has Duo configured, you can use Duo Push instead — no app needed for that path.
  • Requiring MFA workspace-wide needs an admin role.

​
Enroll your own account

1

Open your settings

Select your name, then Settings, then Password & security.
2

Start enrollment

Select Set up two-factor authentication.
3

Scan the code

Scan the QR code with your authenticator app, or enter the secret manually.
4

Confirm with a code

Enter the 6-digit code your app shows, then select Confirm.
5

Save your recovery codes

Get2Dial shows ten one-time recovery codes. Store them somewhere safe — this is the only time they’re shown.
Recovery codes are shown exactly once, at enrollment. If you lose both your authenticator app and your recovery codes, only an administrator can get you back in — see below.

​
Require MFA for your workspace

1

Go to Settings

Select your name, then Settings, then Organization.
2

Turn on the requirement

Turn on Require two-factor authentication.
Anyone who signs in without MFA enrolled is walked through enrollment before they can continue.

​
Verify

Sign out and sign back in. You’re prompted for a code (or a Duo push) after your password.

​
Common problems

  • Lost your device or recovery codes. Ask an administrator to reset your MFA enrollment from Users — you’ll enroll again on your next sign-in.
  • Duo is down. If Duo is unavailable and you also have an authenticator app enrolled, Get2Dial falls back to the TOTP code prompt automatically.
  • You want to turn MFA off for yourself. Go to Password & security and turn it off — you’ll need to confirm your password. Not available if your workspace requires MFA.

​
Next steps

Require single sign-on

Set a session policy