Reset two-factor authentication

The Security tab is conditional. It appears on a worker profile only when that worker’s role is one your provider requires two-factor authentication (2FA) for. If no role enforces 2FA, you will not see this tab.

What it shows

The tab has one section, Two-factor authentication, shown as a status banner. For a role that requires 2FA, expect one of two states.

• Two-factor authentication is active (green): “An authenticator app is set up for this account.”
• Pending activation (amber): “Two-factor authentication is required, but the authenticator app hasn’t been set up yet.”

If the status is Pending activation, the member still needs to complete their own authenticator setup. A reset is for an existing active authenticator, rather than for completing setup on their behalf. Check the saved account and its status before choosing an access-recovery action.

Reset 2FA

A Reset 2FA button appears only when 2FA is active and your role is allowed to manage it.

The worker is signed out and prompted to set up a new authenticator the next time they sign in.

Before resetting access

Open Workforce > Workers, find the person and check their identity through your organisation’s normal process before opening Security. Use a reset when they have lost the authenticator, not as a way to avoid a required security check. Tell the worker to finish or sync any pending mobile work first where possible. After the reset, they need their existing sign-in details and a new authenticator setup. If the reset control is unavailable, ask an owner or admin who can manage that account; changing a custom screen permission alone does not override account hierarchy.