Email & Password with Enforced 2FA
Admin guide to Email & Password with Enforced 2FA passkeys
The traditional email and password login method is available in Hive. For organisations that require it, admins can enforce Two-Factor Authentication (2FA) globally - meaning every user must verify their identity with a second factor (such as a code sent to their phone) after entering their password.
Enforced 2FA is the recommended approach for any organisation that uses email/password logins.
How to Enable Enforced 2FA
|
1 |
From your admin dashboard, open Account Settings → Authentication. |
|
2 |
Scroll to the Email & Password section. |
|
3 |
Ensure the Email & Password login toggle is turned on. |
|
4 |
Find the Enforce 2FA for all users option and toggle it on. |
|
5 |
Click Save Changes. |
After saving, all users who sign in with email and password will be prompted to complete a 2FA verification step on their next login. They will receive a one-time code by SMS or an authenticator app, depending on their personal setup.
Tip: If your organisation primarily uses Social SSO, you do not need to enable Enforced 2FA separately. Social SSO inherits the MFA policies already in place for your Google or Microsoft workspace.