When your company requires two-factor authentication

Your company's admins can require everyone to use two-factor authentication. They can also ask for an email check when you sign in from a new browser. This article explains what you see in each case.

Two-factor authentication is required

Before the deadline

If you haven't set it up, we email you: Acme Test now requires two-factor authentication. Set it up before Mon Nov 16 2026. Until that date, Shorter Loop works as normal. Set it up any time before then: see Set up an authenticator app or Add a passkey or a security key.

After the deadline

If you still haven't set it up, Shorter Loop opens My profile at the two-factor section each time you try to open anything else. It shows a banner that names your company:

Acme Test requires two-factor authentication. Set it up to keep using Shorter Loop.

While you are on this page you can still:

set up an authenticator app, passkey or security key;

see and change your profile;

see your sessions and security log;

sign out.

Everything else waits until you have set it up. You keep your account, your work and your place in the company. Nothing is removed.

As soon as you add your first method and save your recovery codes, Shorter Loop works as normal again.

After you have set it up

You can change, add and remove methods freely, but you can't remove your last one, or turn two-factor authentication off:

Acme Test requires two-factor authentication, so you cannot turn it off.

When it doesn't apply

Single sign-on. If you sign in through your company's single sign-on (SAML or OIDC), the requirement doesn't block you. Your identity provider already checks you.

Several companies. The requirement applies while you are working in the company that requires it. If you switch to a company that doesn't, you aren't blocked there. But you still can't turn two-factor authentication off, because one company requires it.

New-device email check

Some companies ask for an email check when someone without two-factor authentication signs in from a browser they haven't used before:

Check your email: enter the 6-digit code we sent to your email

We email you a 6-digit code.

Type it and click Verify.

Things to know:

Didn't get it? Send a new code sends another code and replaces the old one.

Each code lasts 10 minutes and allows 5 tries.

After this, that browser is known and won't be asked again.

Clearing your browser's site data, or using a private window, counts as a new browser.

This check applies to password sign-ins only.

If you have two-factor authentication, you get your usual second step instead, which is stronger.

For the first 14 days after your company turns the check on, the first browser you sign in from is trusted without a code. This avoids everyone getting an email on the same day.

Set up an authenticator app

Troubleshooting and questions

When your company requires two-factor authentication

Two-factor authentication is required#

Before the deadline#

After the deadline#

After you have set it up#

When it doesn't apply#

New-device email check#