Force 2-factor authentication (2FA) for all users to comply with GDPR

Hey everyone, I wanted to drop into this thread & let you know that this is definitely something we hear you on, & something that we want to do our best to solve. Privacy requirements & account security are things that we & our customers take very seriously, as well we should.

I did want to let you know that, while we don’t have a solution in place for this precise request, we’ve just added a visual icon that will show you which users in your portal have currently enabled 2FA, & can also let you know whether or not that user has generated any backup codes (something we strongly recommend that they do!) You can see the new icon in the Users & Teams section of your portal settings. If a user has the filled version of the icon, shown below, they’ve enabled both 2FA & backup codes. If they have an unfilled version of it, they have 2FA but haven’t completed backup generation yet. The filled icon is shown below: