Set up two-factor sign-in

Changes that affect who can see what need a sign-in with two-factor: an authenticator app or a security key. A stolen password alone shouldn’t be enough to make them. This applies to anyone allowed to make these changes, including Members with Full access to a folder or document.

That covers inviting people, changing members and teams, renaming the workspace, the public link, API access and Search settings, making, changing or stopping a document’s public link, sharing, sharing settings, general access, choosing who may comment or suggest changes, moving and deleting, managing co-authors, deleting a version, removing someone else’s comment or suggestion, giving a duplicate wider access than its original, removing things for good, emptying the trash, and deleting or restoring the workspace. Allowing an API token or connected app to write needs it too, and so does deleting your account while you own a workspace. Reading and editing never need it.

When Colletta asks

If you try one of these while signed in without two-factor, the Two-factor sign-in needed dialog appears. Your account menu also says Signed in without two-factor.

1. Choose Account settings and turn on two-factor there, if it isn’t on yet.
2. Choose Sign in again. You’re asked for your second factor, and these actions work from then on.