An administrator has three security actions on the members of their Company, from the "My company" page (initials, bottom left).

In "My company", at the bottom, turn on "Enforce two-factor authentication". All members of the Company will have to enable it: those who have not yet done so are redirected to its activation at their next login (effect within one minute), with no grace period, and their API keys stop working until they enable it. The page shows the number of active members without two-factor authentication.

From "My company", an administrator can force a member to change their password: their sessions are closed immediately and they receive a reset link by email.

💡 Each member can also change their password themselves from My Account, Security tab.

If a member no longer has access to their authentication app, an administrator can reset their two-factor authentication from "My company", without going through support. The member receives an email, their sessions are closed and they set up the protection again at their next login.