# Workspace security settings

Ask your workspace members to turn on two-factor authentication, require stronger passwords, limit invitations to your domains and reset everyone's password.

Updated: 2026-10-19  
Source: https://drime.cloud/support/workspaces/security-settings

In the admin console, open **Settings** \> **Security**.

![The admin console, Settings \> Security, with Two-factor authentication, Invitation domains and Password strength](https://drime.cloud/media/01M59RSQWYK32RKB7AA7EADTWA/65ec1108deea-web-workspace-settings-security.png)

## Two-factor authentication

Turn on **Two-factor authentication** to ask every member to enable it. Members who have not set it up are asked to do so when they use the workspace on the web: they see **Two-factor authentication required**. You can make exceptions for some members.

See [Two-factor authentication](https://drime.cloud/support/security-and-privacy/two-factor-authentication) for how members turn it on.

## Invitation domains

Under **Invitation domains**, choose who can be invited: any address, only addresses on the domains you list, or every domain except those you list. You can list up to 100 domains. The rule applies to new invitations.

## Password strength

Under **Password strength**, require **Strong** or **Very strong** passwords. The rule applies the next time each member changes their password. If a member belongs to several workspaces, the strictest rule applies. A password that is too weak is refused with **Your team requires a strong password. Add length and avoid names, dates and common words.**

## Reset passwords

**Reset passwords** emails a password reset link to every member except the owner. Use it if you think passwords may have leaked.