Policy Description

The 2-factor Authentication (2FA) policy allows administrators to require that their users enable 2FA to login to their Password Boss account.

Users will be prompted to enable 2FA when they log into Password Boss or when their accounts are synchronized when this policy is enabled.  There is a built-in grace period of 3 prompts over 3 days to allow users to set up their mobile authenticator app and be available.

If users have not enabled 2FA after three prompts, on the 4^th prompt, users will not be able to access Password Boss until they complete the 2FA setup.

Settings

• The default value is OFF
   
• When this policy is ON, users will be prompted to set up 2FA the next time they log in to Password Boss or sync their account.
   
• When this policy is OFF, users can enable or disable 2FA in the Password Boss app.
   
• Disabling this policy does not disable 2FA for users. Turning off this policy allows users to turn off 2FA if they choose to do so.
   

Recommendation

We would recommend that you implement 2-factor Authentication in your company. We also recommend you encourage your users to enable 2FA immediately and start immediately before the end of the prompts to avoid being forced to set up 2FA.

Availability

This policy is available to all accounts with a paid or trial business subscription.