Two-factor authentication
Require a second factor for everyone in the workspace.
Two-factor authentication can be enabled per account or enforced workspace-wide. Enforcement gives people seven days to enrol before it blocks sign-in.
Recovery codes are issued at enrolment. Each code works once.