Two-factor authentication & sessions

Protect privileged access with MFA and see every device that's signed in.

Set up **two-factor authentication** with any authenticator app — scan the QR code, enter the six-digit code, and you're protected. MFA is required for admin roles by default.

Under security settings you can see every active session with its device and sign-in time, and revoke any of them. Closed payroll periods stay immutable, and every change is recorded in the audit trail.

Related articles