Two-factor authentication & sessions

Protect privileged access with MFA and see every device that's signed in.

Set up two-factor authentication with any authenticator app: scan the QR code, enter the six-digit code, and you're protected. An admin can switch on a setting that requires two-factor for every user; it is off by default. A fresh code is always asked for before a full data export and before connecting an integration.

Under security settings you can see every active session with its device and sign-in time, and revoke any of them. Closed payroll periods stay immutable, and every change is recorded in the audit trail.

Related articles