Mandatory two-factor authentication (2FA) at Remote

Two-factor authentication (2FA) adds a second step to your login process. It helps protect the personal, employment, and payment data stored in Remote.

Remote currently supports time-based one-time passwords (TOTP) through authenticator apps. We will also introduce push notifications via the Remote mobile app in a future update. Most people complete setup in just a few minutes.

Why we are enforcing 2FA

We are strengthening our security standards across the platform. Requiring 2FA reduces the risk of unauthorized access and helps protect your company and team members.

Important dates

Starting January 22, 2026:

• All new team members invited to Remote on or after this date must set up 2FA during their first login.

• Existing team members will receive notice via email before 2FA becomes mandatory for their accounts.

No action is required from existing users until they are notified.

How team members can set up 2FA

Team members can enable 2FA at any time from their personal account settings.

When 2FA becomes mandatory for users who log in with an email address and password, they’ll be automatically guided through the setup flow during login.

To activate 2FA, follow this guide: How can I activate two-factor authentication (2FA) for my account?

How company admins can manage 2FA

Company admins can manage 2FA rules to align with their internal security policies.

• You can enforce 2FA for your team at any time from your company security settings.

• Once Remote mandates 2FA for your organization, it can’t be turned off.

See also: How can employers enforce two-factor authentication (2FA)?

Additional resources

To learn more about 2FA at Remote or troubleshooting, you can refer to:

• Does Remote offer two-factor authentication (2FA)?
• Guide to resolving common two-factor authentication (2FA) errors

Frequently asked questions (FAQs)

• Why is 2FA being enforced now?

  Security risks continue to increase across the industry, and passwords alone are no longer enough. Adding 2FA reduces the risk of unauthorized access, even if a password is compromised.

• Can i opt out of mandatory 2FA?

  No, opting out is not possible. 2FA is required for all users to meet security and compliance standards. This applies to all accounts, without exceptions.

• Does mandatory 2FA apply to company admins?

  Yes. We're enforcing 2FA for your team members first, but this security setting will become mandatory for company admins by the end of March 2026.

• My team does not have a phone to enable 2FA, what can I do?

  A smartphone or QR code scan is not required to use 2FA. Review alternative setup methods in our guide: How can I activate two-factor authentication (2FA) for my account?

• I no longer have an account with Remote. Why did I receive an email about this topic?

  You’re receiving this email because your profile in Remote is still active, even if all team members have been offboarded or you haven't signed in for a while.

• I log in to Remote through an integration. Does this apply to me?

  Yes. This applies even if you access Remote through an integration. After you are redirected to Remote, you will be asked to enter a 2FA code. The first time you log in after enforcement, you will be prompted to scan a personal QR code and set up 2FA.

• How does 2FA enforcement work for employees and contractors invited to Remote for the first time?

  When a team member is invited to Remote, they receive an email to set up their profile. After completing self-onboarding, such as verifying their identity and adding a payment method, they will be prompted to set up 2FA the first time they log in.

• I've already enabled 2FA, why did I receive an email?

  If you've already enabled 2FA, you can ignore our enforcement email. You may have set up 2FA after we sent the email, or you might have multiple profiles, and one didn't have 2FA enabled.