Multi-factor authentication (MFA)

Enable MFA in Settings → Profile → Security. Scan the QR code with an authenticator app (Google Authenticator, Authy, 1Password), enter the 6-digit code to confirm, and from then on you'll be asked for a code at sign-in. MFA uses TOTP via AWS Cognito and can be enforced by role for your organization.