Configure your security policy
In your security policy, you determine how your account is protected: with two-step verification, notifications for unusual logins and password rules. This is particularly useful when multiple people work in your account.
Set your security policy
-
Go to Settings, then to Security policy.
- IP monitoring: choose whether you want to receive an email when someone logs in from a new IP address. Enter the email address where we should send these notifications.
- Failed logins: choose whether you want to receive a notification after 3 consecutive failed login attempts.
- Passwords: set after how many days a password expires and how often users can reuse a previous password. These rules apply to all users in your account.
- Two-step verification: leave "Enforce two-factor authentication (2FA) via magic link" checked. All users then confirm each login with a link we send to their email address. The link is valid for 15 minutes and works only once. If you uncheck this setting, that applies to all users and a password alone is enough to log in. We strongly advise against this.
-
Click Save.
Support tip: Turn on notifications for new IP addresses. That way, you know immediately when someone logs in from an unexpected location.
Support tip: two-step verification is turned on by default. We strongly recommend leaving it on, because without two-step verification a password alone is enough to access your account. Do multiple people work in one account? Give everyone their own user profile so that each colleague receives the link in their own inbox.
Next steps
- You can find an overview of all other account settings in Overview of settings.
- You can read how logging in with two-step verification works in Logging in with two-step verification.