With 1Password Business, you can use Advanced Protection to manage two-factor authentication and protect your team. You can select which two-factor authentication methods are allowed and enforce two-factor authentication for your entire team.
You can use Advanced Protection if you’re an owner, administrator, or part of a group with the Manage Settings permission.

To manage two-factor authentication for your team, sign in to your account on 1Password.com. Then click Security in the sidebar and click “View 2FA policy” on the Two-Factor Authentication card.
Manage two-factor authentication
To manage two-factor authentication for your team, select the options you’d like your team to use. You can:
- Enforce two-factor authentication for everyone on your team.
- Allow security keys.
- Use Duo, a third-party option that’s automatically enforced.
- Turn off two-factor authentication completely.

Enforce two-factor authentication
Before you can enforce two-factor authentication, your 1Password account password policy must be set to Strong. Then turn on “Enforce two-factor authentication” in your two-factor authentication settings.
Your team will need to set up two-factor authentication when they sign up, sign in on a new device, or the next time they unlock 1Password.
You can create a team report to see who uses two-factor authentication.
Learn more
- Turn on two-factor authentication for your 1Password account
- Use your security key as a second factor for your 1Password account
- Use Duo for your team
- Enforce 1Password account password requirements in 1Password Business
- Authentication and encryption in the 1Password security model
- About 1Password Advanced Protection
- About 1Password Business