Workspace and adminUpdated
Security settings
Require two-factor for everyone, sign members out after a period of inactivity, control invite links, set the default role and sign out devices.
Settings > Security sets how people join your workspace and how they sign in.
Before you start
- Only owners and admins can open Settings > Security.
- To require two-factor, you need it on for your own account first. See Two-factor sign-in.
Things to know
- Invite by link is on in a new workspace, and Session timeout is 8 hours.
- Default role is the role someone gets when they join, and the role members move to when their role is deleted. Admin can't be the default.
Control invite links
- Go to Settings > Security.
- Under Joining, use the Invite by link switch.
When it's on, each pending invitation in Settings > Members has a copy-link icon, so you can send the link yourself. The link still works only for the address it was sent to. When it's off, the icon is hidden.
Set the default role
Under Joining, open Default role and pick a role. See Roles & permissions.
Require two-factor for everyone
- Under Signing in, switch on Require two-factor authentication.
From then on, anyone without two-factor sees Two-factor authentication required when they open the workspace. They click Set up two-factor authentication and can't continue until it's on.
If the switch is greyed out, click Set it up to turn on two-factor for your own account first.
Sign members out when they're idle
- Under Signing in, open Session timeout.
- Pick 1 hour, 8 hours, 24 hours, 7 days or Never.
Members are signed out after that long without activity.
Sign out a device
Devices lists the browsers signed in to your own account, with This device marked.
- Click Revoke on a row to sign that device out.
- Click Revoke all others to sign out everywhere except here.