Two-factor authentication and sign-in security

Two-factor authentication (2FA) means that signing in needs your password and a six-digit code from an authenticator app on your phone, such as Microsoft Authenticator, Google Authenticator, 1Password or Authy.

#Turn on two-factor

1. Click your name in the top right to open your profile.
2. Under Two-factor authentication, choose Set up two-factor.
3. Scan the QR code with your authenticator app, or type the key into it.
4. Enter the six-digit code the app shows to confirm.

From then on, Knowpoint asks for a code each time you sign in.

#Lost your phone?

Ask an admin. In Admin → Users, they can open your account and reset your two-factor authentication, so you can set it up again on your new phone.

#See who has two-factor on

Admins can see how many people have two-factor turned on in Admin → Sign-in & security.

#How sign-in is protected

• Passwords must be at least 10 characters, and are stored as one-way hashes, never in a readable form.
• Repeated failed sign-ins from the same network are slowed down automatically.
• Every sign-in and failed sign-in is recorded in the audit log. You can get an alert for repeated failed sign-ins. See Notifications and alert rules.
• Your session ends after a period of time, and you'll need to sign in again.

Note: If your workspace uses Sign in with Microsoft, people who sign in that way use Microsoft's multi-factor authentication instead.

Tip: Turning off two-factor, and giving someone admin rights, are both things you can be alerted about with a Security changes rule.