Turning on two-factor authentication

Two-factor authentication is optional and set per person, so each agent decides for themselves. Owners and admins should enable it, and it is strongly recommended for everyone.

Open Settings -> Profile, start the two-factor setup and scan the QR code with an authenticator app such as Google Authenticator, 1Password or Authy. Enter the six-digit code once to confirm, and from then on you are asked for a code after your password at each sign-in.

If you lose your phone, an owner or admin cannot read your codes; you will need to remove and re-enrol the factor from a signed-in session, so keep a second device or your app's backup enabled.