With the new Multi-Factor Authentication (MFA) feature, awork adds an extra layer of security to your login. In addition to your password, you can now verify your identity using a code sent via email or generated by an authenticator app — simple, fast, and secure.
Perfect for anyone who wants to protect their account or needs to meet higher security standards.
What is MFA?
MFA (also known as two-factor authentication) adds an extra step during login to ensure it's really you. This means that even if someone has your password, they still can't access your account without the second factor — for example, a code from your email or an authenticator app.
Supported authentication methods
Currently, awork supports the following MFA methods:
Email code (sent to your verified awork email address)
App authentication using any TOTP-compatible app like:
Google Authenticator
1Password
Safari (macOS)
And many more
💡 Passkeys (biometric login) are already available in awork as a separate feature and are not part of the MFA setup.
How to set up MFA
You can set up MFA in your user settings at any time:
Go to your profile settings.
Click on Manage.
Activate the main authentication toggle to activate email code option.
You can additionally set up the app authentication by toggling the Authenticator app option.
Setting up app authentication
Toggle the Authenticator app switch.
Scan the QR code with your preferred authenticator app.
Enter the generated code to confirm.
Once verified, MFA will be activated and a badge will appear in your settings.
Email authentication
The email option is always enabled when MFA is active.
It uses your verified awork email address.
If your email hasn’t been verified yet, you’ll be asked to confirm it before setting up MFA.
Disabling or changing MFA
You can turn off MFA or change your method at any time in your settings:
Click on Manage and use the toggle to disable MFA or the app method.
After disabling MFA, the setup process must be completed again if you want to re-enable it.
💡 Note: Your authenticator app might still remember the setup, but you’ll need to go through the full setup flow again in awork.
Logging in with MFA
Once MFA is enabled, you’ll be asked to complete a second step when logging in with your email and password.
MFA login flow
Enter your email and password.
You’ll be asked to either:
Enter a code from your authenticator app
Or enter the code sent to your email
You can switch between methods via a button in the login window.
After entering a valid code, you’ll be logged in.
If you log in using an email provider (e.g. Google Login), MFA won’t be triggered — your identity is verified by the provider in that case.
Workspace-wide MFA enforcement
Admins are able to require all users of the workspace to use MFA.
Go to Settings > General > Workspace Settings
Activate the toggle to Require multi-factor authentication.
On the next login all users will be required to provide a second factor (email code or authenticator app).
Users can customize their MFA settings in their profile, but they cannot disable MFA.
This applies across all workspaces linked to the users awork account.