Multifactor authentication (MFA) adds an extra layer of security by requiring users to verify their identity with a second factor — usually a code from an authenticator app — in addition to their password. Organisation administrators can enforce MFA for all users, meaning no one can access the platform without it enabled. We strongly recommend enforcing MFA to protect sensitive compliance and organisational data. Users will be prompted to set up MFA on their next login after enforcement is turned on.