Workspace security settings

In the admin console, open Settings > Security.

#Two-factor authentication

Turn on Two-factor authentication to ask every member to enable it. Members who have not set it up are asked to do so when they use the workspace on the web: they see Two-factor authentication required. You can make exceptions for some members.

See Two-factor authentication for how members turn it on.

#Invitation domains

Under Invitation domains, choose who can be invited: any address, only addresses on the domains you list, or every domain except those you list. You can list up to 100 domains. The rule applies to new invitations.

#Password strength

Under Password strength, require Strong or Very strong passwords. The rule applies the next time each member changes their password. If a member belongs to several workspaces, the strictest rule applies. A password that is too weak is refused with Your team requires a strong password. Add length and avoid names, dates and common words.

#Reset passwords

Reset passwords emails a password reset link to every member except the owner. Use it if you think passwords may have leaked.