Who should read this: Workspace administrators responsible for security policy.Prerequisites: Admin or Account Owner role.
Why enforce 2FA
Two-factor authentication adds a second verification step beyond passwords, protecting your workspace even if a user’s password is compromised. For Part 135 operators handling safety-sensitive data, 2FA helps satisfy the access control expectations of 14 CFR Part 5 safety data protection.Configure 2FA settings
Navigate to Settings > Security > Two-Factor Authentication.2FA policy options
Supported 2FA methods
PlaneConnection supports multiple second-factor methods:Enable 2FA enforcement
Manage passkeys
If passkeys are enabled for your workspace, users can register hardware security keys or platform authenticators (Touch ID, Windows Hello) as their second factor. Navigate to Settings > Security > Passkeys to view passkey enrollment status across your workspace:- Number of users with passkeys registered
- Users with no second factor configured
- Recent passkey registrations
Reset a user’s 2FA
If a user loses access to their second factor (lost phone, broken security key):- Navigate to Settings > Members and find the user.
- Click Edit on their profile.
- Click Reset 2FA. This removes all registered second factors for the user.
- The user must set up 2FA again on their next sign-in.
Related
Manage Security
Broader security settings including session policies.
Configure SSO
Set up single sign-on alongside 2FA.
Permissions Matrix
Role-based access control details.