Overview
Two-factor authentication adds a second verification step when members sign in to Slack, significantly reducing the risk of account takeover from compromised passwords. Enforcing 2FA workspace-wide ensures all members are protected, not just those who opt in. For added security, you can also restrict members to authenticator apps and prevent them from using SMS-based codes, which are more vulnerable to interception.
Prerequisites
Workspace Owner (Free, Pro, Business+ plans) or Org Owner/Admin (Enterprise plans)
Available on all Slack plans
Instructions
Free, Pro, and Business+ plans
From your desktop, click Admin in the sidebar
Select Workspace settings from the menu, then click Security
Next to Two-factor authentication for email sign-in, click Edit
Check Require members to have 2FA set up
To prevent members from using SMS for 2FA, select Authenticator apps only
Click Save
Enterprise plans
From your desktop, click your organization name in the sidebar
Hover over Tools & settings, then click Organization settings
From the sidebar, click Security, then click Security settings
Next to Two-factor authentication for email sign-in, click Edit
Check Require members to have 2FA set up
To prevent members from using SMS for 2FA, select Authenticator apps only
Click Save
⚠️ Members who don't set up 2FA within 24 hours will be signed out of Slack and prompted to set it up before signing in again. New members will be required to set up 2FA before they can create an account.
Note: If your organization uses single sign-on (SSO), 2FA should be configured through your identity provider rather than directly in Slack. If you use Google authentication with Slack, see Enforce MFA in Google Workspace to set up 2-step verification at the Google level.