Overview
Multi-factor authentication (MFA) adds an additional security step to signing in.
When MFA is enabled, users must provide:
their password, and
a one-time code generated by an authenticator app
This reduces the risk of unauthorised access if login credentials are compromised.
How to enable MFA
To enable MFA for your workspace:
Go to Settings → Security
Enable Multi-Factor Authentication (MFA)
Confirm the change
Once enabled, MFA is enforced for all users in the workspace at their next sign-in.
Note: Only workspace admins can enable or disable MFA.
Tip: Notify users in advance, before enabling MFA, to avoid disruption.
What happens for users
When a user signs in after MFA has been enabled:
They enter their email address and password
They are prompted to set up MFA (first sign-in only)
They scan a QR code (or enter a setup key) in an authenticator app
They enter the 6-digit code to confirm setup
They continue into Konsole
After setup, users will be prompted for a one-time code at each sign-in.
