Your account controls access to data about real businesses, so we give you several layers of protection. Turn them on early.
Two-factor authentication
Enable 2FA under Settings → Security using any authenticator app. Owners and admins can require 2FA for every member of the workspace, which we strongly recommend.
Single sign-on
On eligible plans you can connect your identity provider over SAML so your team signs in with your existing corporate credentials. SSO lets you centralize access control and offboard people instantly.
Good hygiene
- Require 2FA or SSO for the whole workspace, not just owners.
- Remove members the moment they leave, or rely on SSO deprovisioning to do it for you.
- Rotate API keys periodically and immediately after any suspected exposure.
Was this article helpful?
Still stuck? Our team is happy to help.