Two-factor authentication adds a second step to every login: a one-time security code sent to your email, entered right after your password.

Introduction

A password is one thing standing between a stranger and every file your office keeps in Pipeline. If it leaks, gets reused somewhere that was breached, or is guessed, that's the whole defense gone. Two-factor authentication puts a second thing in the way.

It's a company-level decision rather than a personal preference. Once your account requires it, it applies across the account, and the flexibility comes from exempting particular people rather than from letting everyone choose for themselves. The other thing to understand before switching it on is that the whole scheme rests on your team's login email working. If someone's Pipeline mail is bouncing or landing in spam, the code doesn't reach them, and what was an email problem becomes a locked door.

Turned on, it means a leaked or reused password isn't enough on its own. It also gives you an early warning: if someone receives a code they didn't ask for, somebody else knew their password. And when a user does get stuck at the code screen, they aren't in trouble and nothing is broken. There's a way back in, and support can walk you through it.

How It Works

2FA sits on top of the normal login: password first, then a fresh code from your email.

A Code Sent to Your Email

The second factor is a one-time security code Pipeline emails to your login email address. Codes are email-only — there's no text-message or authenticator-app option.

Turned On for the Whole Company

2FA is an account-wide setting a master admin switches on. Once it's on, it applies to everyone who isn't specifically opted out.

Who Can Opt Out

Even while 2FA is required company-wide, a master admin can opt themselves out, or opt out any individual user (other than another master admin).

Remember a Device for 30 Days

After entering a valid code, you can have Pipeline remember that device for 30 days, so you sign in on it without a code for that window.

A Daily Code Limit

Pipeline sends up to 6 security-code emails per user in any 24-hour period. The limit resets on its own once the window passes, and it can't be raised.

Require Company-wide Two-factor Authentication

Turn 2FA on for everyone from your account's Feature Settings.

Who Can Do This: Master admins.

To require company-wide Two-factor Authentication:

Click [Gear] in the upper-right corner, then [Admin / Settings].
Scroll down to the Feature Settings section.
Check [Require two-factor authentication].
Click [Save Settings].

From now on, every user who isn't opted out enters a security code from their login email before they can finish logging in.

Opt an Individual User Out of Two-factor Authentication

Exempt a single user from the requirement from their profile.

Who Can Do This: Master admins, for any user except another master admin.

To opt an individual user out of Two-factor Authentication:

Click [Gear] in the upper-right corner, then [Manage Users].
Open the user's profile to edit it.
Check [Opt-out of two-factor authentication].
Click [Update User].

That user can now log in without entering a security code, even though 2FA stays required for everyone else.

Opt Yourself Out of Two-factor Authentication

Exempt your own login from the requirement in My Info.

Who Can Do This: Master admins.

To opt yourself out of Two-factor Authentication:

Click [Gear] in the upper-right corner, then [My Info].
Check [Opt-out of two-factor authentication].
Click [Save Settings].

You'll log in with just your email and password from now on, while 2FA stays on for everyone who isn't opted out.

Log In Using Two-factor Authentication

When your company requires 2FA, add a code from your email to finish signing in.

Who Can Do This: Anyone whose company requires 2FA and isn't opted out.

To log in using Two-factor Authentication:

Log in at the Pipeline login page with your email address and password as usual.
Pipeline emails a security code to your login email address.
Open that email and either click the link at the bottom to continue, or return to Pipeline and type in the code.
Optionally, check [Remember this device for 30 days] to skip the code on this device for the next 30 days.
Click [Continue].

You'll land on the Home page.