How to Enable Organization 2-Factor Authentication (2FA)
For organizations handling sensitive information, requiring multi-factor authentication (2FA) for all users adds an important layer of security. Organization-wide 2FA ensures that every team member verifies their identity using a second factor before accessing Notehouse.
Once enabled, users who haven’t already set up 2FA will be prompted to do so at their next login and won’t be able to access the application until enrollment is complete.
Table of Contents
- About Organization 2FA
- How to Enable Organization 2FA
- How Does This Impact Users in My Organization?
- Disabling the Requirement
About Organization 2FA
When organization-wide 2FA is enabled, all users are required to authenticate using two factors when logging in. This requirement applies to existing users and any new users added to the organization.
Supported 2FA methods include authenticator apps and SMS. Users must complete 2FA enrollment before they can access Notehouse, and the requirement cannot be skipped or bypassed.
When to enable organization-wide 2FA
You may want to enable 2FA if your organization:
- Handles sensitive or confidential client data
- Is subject to compliance requirements such as HIPAA
- Has internal security policies requiring two-factor authentication
- Wants to reduce the risk of unauthorized account access
How to Enable Organization 2FA
Only the Account Owner can enable organization-wide 2FA.
- Go to Account Settings
- Navigate to the Organization tab
- Enable the requirement and confirm
How Does This Impact Users in My Organization?
- Users already enrolled can continue using their existing 2FA method without interruption.
- Users without 2FA are prompted to enroll at their next login and must complete setup before accessing the app.
- New users are required to set up 2FA during onboarding before they can proceed.
Disabling the Requirement
If needed, the Account Owner can disable the 2FA requirement from the Organization settings by following the same steps and selecting Disable. Existing 2FA enrollments remain in place, and users can choose whether to keep or remove 2FA after the requirement is turned off. Please consider the security implications before disabling organization 2FA.
For any questions, reach out to support@getnotehouse.com.