Overview
This article explains how two-factor authentication (2FA) is applied in Hyver and how administrators can manage it for all users. 2FA adds an extra layer of protection by requiring users to verify their identity using two forms of authentication.
By default, 2FA is automatically enabled for all users in a company.
How 2FA works in Hyver
When 2FA is enabled, users must enter both their password and a second verification factor (typically a mobile app code) to log in.
This protects accounts even if passwords are compromised.
Default behavior
2FA is automatically enforced for new users when they join a company in Hyver.
Existing users keep their current 2FA status unless changed by an admin.
Admin controls
Enable 2FA for all users:
Admins can turn on 2FA for the entire company. Once enabled, individual users cannot disable it.Disable 2FA for all users:
Admins can also turn off 2FA company-wide. After that, individual users can choose to enable 2FA for themselves.Per-user 2FA control is not supported:
Admins cannot enforce or disable 2FA for specific users only — it’s all or nothing at the company level.
Important notes
Admins must use their Hyver password to confirm any 2FA changes — even if they log in via SSO.
The setting applies only to future behavior. It does not retroactively override current user 2FA status.
Wrap-up / Next Steps
2FA is one of the simplest and most effective ways to secure access. If you're not enforcing it already, it's worth considering — especially in high-sensitivity environments.