---
title: Enforce Two-Factor Authentication (2FA)
description: Enforce two-factor authentication for your Capawesome Cloud organization. Enable 2FA for enhanced security and compliance for mobile teams.
---

# Two-Factor Authentication

For enhanced security, Capawesome Cloud allows organizations to enforce two-factor authentication (2FA) for all members. When 2FA enforcement is enabled, all members of the organization must have 2FA enabled on their accounts to remain part of the organization.

## How 2FA Enforcement Works

When 2FA enforcement is enabled for an organization, the following rules apply:

- **Existing members retain access**: Members who are already part of the organization when 2FA enforcement is enabled will remain in the organization, even if they haven't enabled 2FA yet. They can continue to access the organization until they enable 2FA themselves or are manually removed and re-invited to enforce the requirement.
- **New members must have 2FA enabled**: New members or members accepting invitations must have 2FA enabled on their account before they can join the organization.
- **Members cannot disable 2FA**: Once a member has enabled 2FA and joined an organization with 2FA enforcement enabled, they cannot disable 2FA on their account while they remain a member of the organization.

## Enabling 2FA Enforcement

To enable 2FA enforcement for your organization:

1. Go to the **Settings** page in the [Capawesome Cloud Console](https://console.cloud.capawesome.io/organizations/_/settings){:target="_blank"}.
2. Scroll to the **Security** section.
3. Enable **Require two-factor authentication**.
4. Click on the **Save** button.

![Security settings of an organization](../../assets/images/screenshots/cloud-organization-security-settings.png)

Once enabled, existing members will retain access to the organization regardless of their 2FA status. However, new members will be required to have 2FA enabled before they can join. To enforce 2FA for existing members without 2FA, you will need to manually remove them from the organization and re-invite them.

Only organization owners and admins can change this setting.

## Disabling 2FA Enforcement

To disable 2FA enforcement for your organization:

1. Go to the **Settings** page in the [Capawesome Cloud Console](https://console.cloud.capawesome.io/organizations/_/settings){:target="_blank"}.
2. Scroll to the **Security** section.
3. Disable **Require two-factor authentication**.
4. Click on the **Save** button.

Once disabled, members will no longer be required to have 2FA enabled, and they can disable 2FA on their accounts if they choose to do so.

## Setting Up 2FA

For information on how to set up two-factor authentication on your account, please refer to the [Authentication](../accounts/authentication.md#two-factor-authentication-mfa) guide.

## Next Steps

- [Network restrictions](network-restrictions.md) — limit access by IP address or country.
- [Single sign-on (SSO)](sso/index.md) — enforce SSO for your members.
- [Roles & permissions](roles-and-permissions.md) — control what each member can do.