English (US)
Log in
Strona główna
Strona główna
GETTING STARTED
Get your whole company connected in as little as 5 weeks.
Choosing Workplace
Let's get into all the reasons that Workplace is the right choice for your business.
Solutions
From leveling-up company communication to building a better culture, we’re here to solve your toughest challenges.
Customer Stories
Find out how organizations like yours are using Workplace to solve their most important business challenges.
Why Workplace
Why Workplace? Because it's familiar, mobile, secure, integrated and connects everyone. Why else?
Diversity & Inclusion
We’re doing our bit for a better world by making sure every employee feels seen, heard and valued.
Future of Work
Learn how to take your first step into the metaverse with Meta's hardware and software solutions.
How can Workplace help you?
From leveling-up company communication to building a better culture, we’re here to solve your toughest challenges.
Business Communication
Our easy-to-use tools will make your most important messages unmissable, and your intranet inspirational.
Employee Engagement
Ditch the email for more engaging company-wide conversations that give every employee a voice.
Strengthen Culture
Show people you’re committed to culture by empowering everybody to be the best version of themselves.
Getting Connected
Bring your entire organization together on Workplace, even if they don't have an email address.
Frontline Workers
61% of frontline managers say there’s a disconnect in communication with head office. We help close the gap.
Remote and Hybrid Working
Whether they’re working from home or the office, Workplace keeps your employees connected to your company’s culture.
Browse All
Organizations of all shapes and sizes are gaining a competitive edge with Workplace. Find your favorite story.
Podcasts
Listen to our Pioneer Podcasts to hear some of our favorite success stories from our biggest champions.
TECHNICAL RESOURCES CENTER
Get help with setting up Workplace, managing domains and other technical issues.
Mastering Workplace Features
Ready to become a Workplace pro? Learn all the ins-and-outs of our key features with in-depth guides, step-by-step user instructions and resource hubs.
Technical Resources
You don't have to be an IT genius to launch Workplace, but if you are then these technical resources are for you.
Help Center
Find step-by-step instructions and answers to frequently asked questions.
Support
Still can't find what you're looking for? Get in touch with a team of experts for more hands-on support.
What's New in Workplace
Stay up to speed with all the latest Workplace innovations, feature announcements and product updates.
Set up Guides
From adding a domain to inviting users, follow this step-by-step guide to set up your Workplace.
Domain Management
Find out why domain management matters - and how to do it properly.
Workplace Integrations
Discover how to bring all your tools together. Something missing? Learn how to build your own integrations.
Account Management
Keep your Workplace up to date by creating, maintaining or deactivating user accounts.
Authentication
Make sure you only give access to the right people by integrating with your current identity solutions.
IT Configuration
Learn how to keep Workplace running smoothly with info on networks, email whitelisting and domains.
Account Lifecycle
Understand the process of inviting members of your organization to claim their accounts.
Security and Governance
Get the lowdown on how we keep your people and information safe on Workplace with added technical terminology.
Workplace API
Learn how you can automate and integrate your custom solutions with Workplace using our API.
Getting started
From launching Workplace to paying for it, learn more about those crucial first steps.
Using Workplace
This is where we reveal the hidden depths Workplace has to offer with tips and info on key features.
Managing Workplace
Got a specific question about managing content, data or employees? This is the place to ask it.
IT and Developer Support
Looking for answers to more technical questions about security, integration and the like? Start here.
Support
Still can't find what you're looking for? Get in touch with a team of experts for more hands-on support.
Get in touch
Need help with your Workplace account? Fill out this form to get all the answers you need from our customer support.
Security
    Customer Stories
    Workplace for Good
      Getting Started
        Interactive Demo
          Pricing Plans
            Forrester ROI Study
              Events & Webinars
                Ebooks & Guides
                  Newsroom
                    Become A Partner
                      Service & Reseller Partners
                        Integrations Partners
                          Start Using Workplace
                            Mastering Workplace Features
                            Workplace Use Cases
                              Workplace Academy
                                Customer Communities
                                  English (US)

                                  Security and Governance > Account Security 2FA

                                  Understand how your organization can control and protect your accounts.

                                  Overview

                                  Overview

                                  A core part of the Workplace mission is to provide a secure community for everyone who uses Workplace. Maintaining the security of account information on Workplace is at the very heart of what we do.

                                  Account credentials at risk

                                  Account Credentials at Risk

                                  Workplace will show the admins of a community if an account is suspected of being a security risk. An account will be marked “At Risk” if the password has been used for a non-Facebook/Workplace service that has suffered a data breach.

                                  If a Workplace account is at risk, an attacker may be able to access the Workplace community. Therefore, we recommend admins force the affected users to reset their passwords or disable their accounts.

                                  How do I identify which user accounts are at risk?

                                  If you have received a prompt that says a security risk has been detected, or the dashboard in your Security tab shows at risk accounts, this means that we suspect that the Workplace passwords of some of the user accounts in your community may be at risk. Given that there's a small risk that an attacker could use that information to access your Workplace community, we recommend that you disable these users or force them to reset their passwords.

                                  To see which accounts may be at risk:

                                  1
                                  Go to the Admin Panel.

                                  2
                                  Click Security.

                                  3
                                  Go to the Dashboard tab to view a summary of Accounts at Risk.

                                  4
                                  Click on View to see which users are affected.

                                  Accounts that are at risk will be highlighted in red and labeled Account at Risk in the People panel. To disable the user or force them to reset their password, click next to the account that's at risk and select Deactivate User or Force Password Reset.

                                  Two-factor Authentication (2FA)

                                  Two-Factor Authentication (2FA)

                                  Two-Factor Authentication, also known as 2FA, is an extra security check that requires a user to enter an additional identifier that only they have access to. Usually this is requested once the user has entered their username and password.

                                  As a user who has 2FA activated in Workplace, you are asked for this additional identifier each time you try to log in to your Workplace account or app from a new device. Once you've entered this identifier, you have the option to save the device to your account so that you don't have to repeat the process each tiem you log in from the same device.

                                  There are two setup options. Both require the Workplace authentication method to be set to password:

                                  • Admins can set up 2FA for all or a selected group of users.
                                  • Users can enable 2FA on their own accounts.

                                  In both cases, the user selects which method of 2FA they want to use: QR code or SMS.

                                  ?
                                  For users who have their authentication set to Single Sign-On (SSO), companies have to configure 2FA at SSO level. Workplace can't be used as a stand-alone 2FA provider.
                                  Turn on 2FA as an Admin

                                  Turn on 2FA as an Admin

                                  To turn on 2FA for all or selected users:

                                  1
                                  In the Admin Panel, select Security, click on the More drop-down box, and then select Two-factor.

                                  2
                                  Move the Require two-factor authentication slider to the on position.

                                  3
                                  At the Decide who is required drop-down, select the user group that is required to use 2FA. Remember that the authentication type for all selected users must be set to Password.

                                  4
                                  Set a date for the start of 2FA for this user group.

                                  5
                                  Click Save changes.

                                  Your colleagues will see a notice in their feeds inviting them to set up 2FA. They can follow the instructions in Set up 2FA as a User.

                                  If a user has not set up 2FA by the start date, they’ll see the following lock screen asking them to enable 2FA:

                                  Turn on 2FA as an User

                                  Turn on 2FA as an User

                                  To turn on 2FA either in response to a request or for your own use:

                                  1
                                  Log in to Workplace.

                                  2
                                  Click on your profile picture at the bottom left of the screen, and select Settings.

                                  3
                                  Click Security and Login.

                                  4
                                  Scroll down and click Edit in the Use two-factor authentication row. You are asked to Choose a Security Method (you may also be asked to reenter your password).

                                  5
                                  Select either Use Authentication App or Use Text Message (SMS).
                                  • If you select Authentication App (eg Duo or Google Authenticator), a QR code (and an alphanumeric code) are displayed. Enter this into your authentication app.
                                  • If you select Text Message (SMS), the Add Phone Number dialog box displays. Enter a phone number, and then confirm that you own the number by entering a confirmation code sent to you via SMS.
                                  Check Login failures

                                  Check Login failures

                                  We show admins an overview of the login failures we have registered for Workplace accounts in the last 7 days, to help them identify any suspicious patterns in their organization.

                                  To see an overview of login failures:

                                  1
                                  Go to the Admin Panel.

                                  2
                                  Click Security.

                                  3
                                  Go to the Dashboard tab to view a summary of Login failures in the last 7 days.

                                  4
                                  Pick the event you'd like to investigate more and click on View to check the related Security Logs.