FAQ: Enable 2FA for all employees

Every user can enable Two-Factor Authentication (2FA) in their own user account.

Admins and managers cannot enable 2FA on behalf of other users: to enable 2FA, the employee must set up an authenticator app on their own smartphone, which only they can do themselves. Likewise, it is not possible to require employees to enable 2FA after their next login, as some employees do not have a smartphone, cannot enable 2FA, and would therefore be permanently locked out.

Instead, as an admin you can view the list of users who do not have 2FA enabled and send them an email asking them to enable it.

Send a request to enable 2FA

Sign in to Timebutler as an admin and click Settings in the bottom left, then Security beneath it. Under the Users without 2FA heading, you can display all employees who do not have 2FA enabled. Below that, there is a button to send the request to enable 2FA to these users.