> ## Documentation Index
> Fetch the complete documentation index at: https://docs.appsignal.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Two-Factor Authentication Enforcement

Two-Factor Authentication Enforcement allows you to require all members of an organization to enable Two-Factor Authentication on their AppSignal account.

## Enable Two-Factor Authentication Enforcement

Two-Factor Authentication Enforcement can be enabled in your [organization's Members settings](https://appsignal.com/redirect-to/organization?to=admin/members) screen:

<img src="https://mintcdn.com/appsignal-715f5a51/4TRZP0Sq9Zq7PAPW/assets/images/screenshots/organization/2fa-enforcement/enable-2fa.png?fit=max&auto=format&n=4TRZP0Sq9Zq7PAPW&q=85&s=6d9227b719afc1e10fb05062d5832e68" alt="Screenshot of organization members screen with 2FA Enforcement option" width="2560" height="1566" data-path="assets/images/screenshots/organization/2fa-enforcement/enable-2fa.png" />

When activated organization members without Two-Factor Authentication will be given a [grace period](#grace-periods) to enable it. An email notification and warning bar in the AppSignal app will inform them that Two-Factor Authentication has been enforced:

<img src="https://mintcdn.com/appsignal-715f5a51/4TRZP0Sq9Zq7PAPW/assets/images/screenshots/organization/2fa-enforcement/2fa-warning.png?fit=max&auto=format&n=4TRZP0Sq9Zq7PAPW&q=85&s=b7f12475453ea073dd5d6e6961f6b8ad" alt="Screenshot of organization members screen with 2FA Enforcement option" width="2560" height="1440" data-path="assets/images/screenshots/organization/2fa-enforcement/2fa-warning.png" />

Clicking on the link in the email, or banner will take the user to the Two-Factor Authentication set-up screen.

## Grace periods

When Two-Factor Authentication Enforcement in enabled organisation members are given a grace period to set-up Two-Factor Authentication on their AppSignal accounts:

| Member           | Grace period |
| ---------------- | ------------ |
| New members      | 3 days       |
| Existing members | 7 days       |

If a user does not enable Two-Factor Authentication before the end of their grace period they will locked out of the organization until it's enabled:

<img src="https://mintcdn.com/appsignal-715f5a51/4TRZP0Sq9Zq7PAPW/assets/images/screenshots/organization/2fa-enforcement/2fa-lockout.png?fit=max&auto=format&n=4TRZP0Sq9Zq7PAPW&q=85&s=9f93e0327d6a379aadb086ef6edc91e2" alt="Screenshot of organization members screen with 2FA Enforcement option" width="1280" height="720" data-path="assets/images/screenshots/organization/2fa-enforcement/2fa-lockout.png" />

## Disable Two-Factor Authentication Enforcement

Two-Factor Authentication Enforcement can be disabled in your [organization's Members settings](https://appsignal.com/redirect-to/organization?to=admin/members) screen:

<img src="https://mintcdn.com/appsignal-715f5a51/4TRZP0Sq9Zq7PAPW/assets/images/screenshots/organization/2fa-enforcement/disable-2fa.png?fit=max&auto=format&n=4TRZP0Sq9Zq7PAPW&q=85&s=8a2931132d56f5e903f19e088efa3da5" alt="Screenshot of organization members screen with 2FA Enforcement option" width="2560" height="1566" data-path="assets/images/screenshots/organization/2fa-enforcement/disable-2fa.png" />

When disabled members will no longer require Two-Factor Authentication to access the organization.
