# Manage 2FA for Agency Accounts

[Account Administrators](https://app.gitbook.com/s/wMLlMoFBtKJa8ptd3zaw/what-would-you-like-to-learn-about/account-administration/account-settings/invite-and-manage-users/understanding-user-management-as-a-brand) can require all account members to use 2-factor authentication (2FA) when they sign in to the impact.com agency account from a new device, or when they attempt to perform a partner funds transfer. If this requirement is put into place, any member who is invited to join the account will automatically be prompted to sign in with 2FA, with the authentication method set to email by default. See [Two-Factor Authentication FAQs](https://app.gitbook.com/s/hRN1rcrim887TwHLBjac/reference-documentation/two-factor-authentication-faqs) to learn more about 2FA on impact.com.

The user experience with 2FA enabled is as follows:

* Upon first signing in, the account member will receive a verification code on their mobile device via SMS, email, or an authentication app.
* When an account member has successfully been authenticated, their device is automatically saved as a trusted device—meaning they won’t need to use 2FA on subsequent sign-ins. Account members will only be asked to use 2FA again if their device has changed or if unusual activity was detected.
* Account members can manage saved devices on the impact.com user profile screen.

#### Turn on 2FA sign-in for all users

This will enable mandatory 2-factor authentication for all account users that sign in to your account.

1. From the left navigation menu, select ![](https://1033662419-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FokTNfAIjBtFchXJ9pC2q%2Fuploads%2Fgit-blob-2353e6dbc5652c0304edc7da554b01277ad88839%2F380bebd18697484deff243a63d0ed3fda5b8b3ae7a5d1da26278c64764d33cd9.svg?alt=media) **\[Menu] → Settings**.
2. Under *General*, select **Account User Authentication**.
3. On the *Account User Authentication* screen, select Select ![](https://1033662419-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FokTNfAIjBtFchXJ9pC2q%2Fuploads%2Fgit-blob-d0b6669ae76a7bef06a8d6940d7ad5c16bb8d018%2F7cb018d4face8d7cceb880eb5086c812e764fbcfe6f2a0377f88bc7576973070.svg?alt=media) **\[Toggle on] User Login**.
4. Select **Save**.

#### Turn on 2FA for PFTs

This will enable a mandatory 2FA check for account users attempting a partner funds transfer above the transfer minimum amount — once authenticated, the PFT will go through.

1. From the left navigation menu, select ![](https://1033662419-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FokTNfAIjBtFchXJ9pC2q%2Fuploads%2Fgit-blob-2353e6dbc5652c0304edc7da554b01277ad88839%2F380bebd18697484deff243a63d0ed3fda5b8b3ae7a5d1da26278c64764d33cd9.svg?alt=media) **\[Menu] → Settings**.
2. In the left column, under *General*, select **Account User Authentication**.
3. On the *Account User Authentication* screen, select ![](https://1033662419-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FokTNfAIjBtFchXJ9pC2q%2Fuploads%2Fgit-blob-d0b6669ae76a7bef06a8d6940d7ad5c16bb8d018%2F7cb018d4face8d7cceb880eb5086c812e764fbcfe6f2a0377f88bc7576973070.svg?alt=media) **\[Toggle on] Partner Funds Transfer**.
4. Under *Transfer minimum*, input a value as the minimum amount to require 2FA.
5. Select **Save**.

#### Manage saved 2FA devices

1. From the left navigation menu, select ![](https://1033662419-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FokTNfAIjBtFchXJ9pC2q%2Fuploads%2Fgit-blob-1183576591b45997efe4dc81a25024640591d02a%2F245137dc972a7a7f6165b59538fcdbac8fd5bd8fee4ba9f20c1a2982c5b58b57.svg?alt=media) **\[User Profile] → Edit Profile**.
2. Under the *Security* section — next to *Devices and Activity* is a list of saved devices for the account.
3. Select **Remove this device** if you no longer access impact.com on that device.
