Enable multi-factor authentication

Why MFA matters

Your staff accounts can change bookings, view player information, and manage money. MFA adds a second check when someone signs in, reducing the impact of a stolen password or email session.

Set it up

1. 1

   Open Security from the club workspace.

2. 2

   Choose the MFA option your staff can reliably use.

3. 3

   For an authenticator app, scan the TOTP setup code and save the recovery information securely.

4. 4

   For SMS, use a supported phone number and complete the verification step.

5. 5

   Ask each staff member to enable MFA on their own account when the club requires it.

TOTP is recommended

An authenticator app is usually more resilient than SMS. Keep recovery information in a secure team process and never paste codes into a shared chat.