Two-factor authentication

Turn on 2FA under Settings → Security with any authenticator app. Workspace owners can require it for every seat.

Recovery codes are shown once at setup — print them and put them in the drawer with the truck keys.

The require-it switch is the one worth flipping: your workspace holds every client's name, address and payment history, and it is only as protected as its least careful sign-in. Phone died? A recovery code gets you in, and re-enrolling a new phone takes a minute from Settings → Security.