Require two-factor authentication
Make every member set up an authenticator app or security key, with a grace period for people already signed up.
Screenshots are retaken from IQ Entities on every release. Updated 14 October 2026.
The registers, shareholdings and personal data in IQ Entities are worth protecting with more than a password. Requiring two-factor authentication means every member must set up an authenticator app or a security key before they can use IQ Entities. People who already have one are not affected.
The question to settle is how long existing members get. A few days lets people enrol at their own pace; immediately is right after a security incident.
Check who is ready
In Administration, open Sign-in Security. The tiles at the top count the members, how many have Two-factor on, and how many are Not yet set up and would be asked to enrol.
Read the list at the foot of the page. It shows each member's Two-factor status and what they sign in with.
Switch the requirement on
On the Require two-factor authentication card, the line in the middle says how many members have no second factor yet and will be asked to set one up.
Under When switched on, apply to existing members, choose how long existing members have: Immediately, After 7 days, After 14 days or After 30 days.
Turn on the switch. The card changes from Optional to Required and shows the date it was required from and, if you chose a grace period, the date existing members have until.
| The situation | What to choose |
|---|---|
| Introducing the requirement in the normal course | After 14 days or After 30 days |
| A small team you can tell today | After 7 days |
| After a suspected compromise of a password | Immediately |
Anyone invited after the requirement is switched on is asked to set up a second factor straight away, whatever grace period you chose.
What members see
A member without a second factor, once their grace period ends, sees a page saying Your organization requires two-factor authentication in place of the app, with Set up two-factor authentication to enrol. Enrolling takes about a minute and is asked once.
Tips from practice
- Tell members before you switch it on, and send them to their own settings to set up two-factor in advance. The Not yet set up tile shows who still has to.
- A member marked Not checked could not be checked when the page loaded. They are not counted as missing a second factor; reload the page later to see them.
- Choose the grace period before you turn the switch on: the choice is offered only while the requirement is off, and once it is on the card shows the dates instead.
Related: Set up single sign-on and Let Board Intelligence support in.