Introduction
Two-factor authentication (2FA) adds a second check when someone logs in: a 6-digit code from an authenticator app on their phone, on top of their password. This protects your company's equity data even if a password is leaked.
If you're a company admin, you can make 2FA mandatory for everyone with access to your company in Ledgy. This article explains who can turn the requirement on, what your stakeholders and collaborators will see, and how to turn it off again.
Want to set up 2FA on your own account? See How do I set up and use 2FA on my Ledgy account?
Before you start
To require 2FA for your company, you need all three of the following:
The right plan: Requiring 2FA is available on the Enterprise plan. If your plan doesn't include it, clicking the toggle opens an upgrade prompt.
The right permissions: You need permission to edit general company settings. The default Owner and Admin roles both have it.
2FA on your own account: Until you've set up 2FA for yourself, the toggle is greyed out and shows "Please set up 2FA for your own account before requiring it for others." Click the link in that message to set it up.
How to require 2FA for your company
Go to Company Settings > General.
In the Security section, find Require two-factor authentication.
Click the toggle.
In the pop-up, check the message and click Enable.
If Ledgy asks, confirm your identity again. Why does Ledgy ask me to authenticate again?
Tip: Let your stakeholders and collaborators know before you turn this on, and send them How do I set up and use 2FA on my Ledgy account? so they know what to expect.
What happens when you require 2FA
Existing stakeholders and collaborators get an email saying your company now requires 2FA. You don't get this email yourself.
At their next login, they see a pop-up that says "You have been required to enable Two-Factor Authentication by [your company]". They need to finish the setup before they can continue in Ledgy, or they can log out and come back later.
People you invite later don't get the email. They see the same setup pop-up after accepting their invitation.
People who already use 2FA aren't interrupted. They just can't turn 2FA off in their account settings anymore.
People in more than one company keep 2FA on as long as at least one of their companies requires it.
Important: The requirement only applies to people who log in with an email and password. People who log in with Google or with your company's single sign-on (SAML/OIDC) don't see the prompt and don't get the email. If your company uses SAML or OIDC, set up multi-factor authentication in your identity provider instead. See how to set up Single Sign-On (SSO).
How to stop requiring 2FA
Go to Company Settings > General and find the Security section.
Click the Require two-factor authentication toggle.
In the Disable two-factor authentication pop-up, click Disable.
If Ledgy asks, confirm your identity again.
Note: No email is sent when you stop requiring 2FA. Anyone who already set up 2FA keeps it, but they can now turn it off in their own account settings, unless another of their companies still requires it.
FAQs
Will requiring 2FA lock people out?
No. Nobody is locked out. Each person is asked to set up 2FA the next time they log in. They can't use Ledgy until they finish the setup, which only takes a minute with an authenticator app.
A stakeholder lost their phone. Can I reset their 2FA?
No. Admins can't reset another person's 2FA. The stakeholder can get back in with their recovery email or recovery code, or by verifying their identity. Send them to What if I lose access to my authenticator app? If they're still stuck, they can contact Ledgy Support.
Can I see someone's recovery code?
No. Recovery codes are only shown to the account holder during setup. Ledgy Support can't see them either.
Why can't I use the toggle?
Check that:
Your company is on the Enterprise plan.
Your role can edit general company settings.
You've turned on 2FA for your own account.
Can I require 2FA for collaborators but not stakeholders?
No. The setting applies to every stakeholder and collaborator in your company who logs in with an email and password.
Need further support? Reach out to our Support team via chat or email.