> For the complete documentation index, see [llms.txt](https://support.ordereazi.com/central/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://support.ordereazi.com/central/order-management/settings/organization-setup/system-settings/security-options.md).

# Security options

Require every user to set up multi-factor authentication, and email the users who haven't yet.

A stolen password is enough to get into most systems. With multi-factor authentication (MFA), signing in also needs a code from the user's phone, so a password on its own isn't enough. The **Security** settings in System Settings make MFA required for everyone in your organisation.

### Before you start

You'll need the **Organization Setup** permission, in the **Settings** permission group. To email users about MFA, you'll also need **Manage Users**.

Set up MFA on your own account first: select your name or initials at the top of the page, then **Security & MFA**. Until you do, the setting can't be saved, so you can't lock yourself out of settings.

### How to require MFA

1. In the main menu, go to **Settings** > **Organization Setup**.
2. Select the **Configuration** tab.
3. Under **Security**, tick **Require Multi-Factor Authentication**.
4. You're asked "Require MFA for all users?". Select **Yes, require MFA**.
5. Select **Save**.

You see "System Settings saved successfully". From then on, every user who hasn't set up MFA is asked to on their next sign-in, and can't use the rest of OrderEazi until they do.

If you see "Enable multi-factor authentication on your own account before requiring it for the organization, otherwise you would be locked out of settings.", set up MFA on your own account, then save again.

### How to remind users to set up MFA

Once MFA is required and saved, you can email everyone who hasn't set it up yet:

1. Under **Security**, select **Email un-enrolled users to set up MFA**.
2. You're asked "Email un-enrolled users?". Select **Send**.

You see "Enrolment email sent to" and the number of users. Each active user without MFA gets an email saying they'll be guided through setting it up on their next sign-in.

**Example:** You set up MFA on your own account, tick **Require Multi-Factor Authentication**, and save. You then select **Email un-enrolled users to set up MFA**, and 12 users get the email. The next morning, each of them scans a code with an authenticator app when they sign in, and then carries on as normal.

> **Note:** Users who sign in with single sign-on do MFA with your company's sign-in service, not in OrderEazi.

### Related pages

* [System Settings](/central/order-management/settings/organization-setup/system-settings.md): the other settings groups
* [Single sign-on (SSO)](/central/order-management/settings/organization-setup/single-sign-on-sso.md): sign in with your company's work accounts
* [Users](/central/order-management/settings/manage-users/users.md): see your users
* [Signing in and security](/central/getting-started/signing-in-and-security.md): how users set up MFA