Security for Collectives

Collectives have some additional policy tools at their disposal to reduce risks. Read more about two-factor authentication enforcement.

Two-factor authentication (2FA) adds another level of security to accounts.

If an account’s password is hacked, it requires the user to provide another proof of identity, such as a security question or a code generated from an authenticator app.

Collectives and their Fiscal Hosts can choose to force all admins to have 2FA enabled. This will block any admin from accessing admin pages or completing tasks until they’ve done so.

Enforcing 2FA for all admins

• Go to your collective's Dashboard > Settings > Security.

• Click on the tick box for “All admins must have 2FA.

• Save your changes.

If you get locked out of your account due to 2FA please contact our support team. In order to grant you access we will require substantial proof that the account is indeed yours.