Set up two-factor for admin access

Every admin must use two-factor authentication. Until you turn it on, Admin sends you to your account's security settings instead of opening.

1. Click Admin. If two-factor isn't on yet, you land on your security settings under a Two-factor required for admin access banner.
2. Click Set up two-factor now and follow the steps; see Turn on two-factor authentication for the details.
3. Click Admin again. The banner is gone and Admin opens.

If you leave it too long

Seven days after you became an admin, the requirement tightens. A red Two-factor enrollment overdue banner appears, and every page except your account settings sends you back to them. Clicking an admin link shows Admin access restricted. Turning on two-factor lifts all of this immediately, without signing in again.

Good to know: the requirement applies to everyone with the Administrator role and to system administrators. Your deployment's operator can switch it off for the whole instance.