> For the complete documentation index, see [llms.txt](https://docs.snyk.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.snyk.io/scan-fix-and-prevent/scan-with-snyk/snyk-api-web/managing-account/enforce-2fa-for-all-users.md).

# Enforce 2FA for all users

How to enforce two-factor authentication for all Snyk API & Web users

{% hint style="info" %}
**Snyk is rolling out a new navigation.** The steps on this page describe the classic interface. If your view looks different, visit [Navigate the Snyk Web UI](https://docs.snyk.io/navigate-the-snyk-web-ui#where-things-moved) to map these options to the new interface.
{% endhint %}

## Enforce 2FA for all users

Learn how to enforce two-factor authentication (2FA) for all users of your Snyk API & Web account.

Two-factor authentication (2FA) strengthens authentication with an additional layer of security that requires presenting an extra piece of evidence (the possession factor) to the authentication mechanism of a website or application. To obtain the possession factor, you can use an authenticator like Google Authenticator, 1Password, Authy, or Microsoft Authenticator, which provides a random code that changes frequently.

If you are the owner of the Snyk account, you can enforce 2FA for all its users so that they have this extra layer of authentication in their profiles.

### Enforce 2FA

In the Snyk app, enforce 2FA for all users as follows:

1. Open the **Settings** dropdown on the bottom-left corner of the navigation bar and click **Authentication**.
2. In the **TWO-FACTOR AUTHENTICATION (2FA) SETTINGS** section, click **Enforce 2FA**.
3. In the dialog that appears, enter your password and 2FA code as a security measure.

After you enforce 2FA, the following happens to the users of your account:

* **Users logging in without 2FA set up for their profile**\
  At login, they must follow extra steps to set up 2FA for their profile.\
  The procedure is like steps four and five described in [How to set up 2FA for your profile](https://help.probely.com/en/articles/8945079-how-to-set-up-2fa-for-your-profile).
* **Users already logged in without 2FA set up for their profile**\
  Snyk logs out these users automatically.\
  When they log back in, they must follow extra steps to set up 2FA for their profile.\
  The procedure is like steps four and five described in [How to set up 2FA for your profile](https://help.probely.com/en/articles/8945079-how-to-set-up-2fa-for-your-profile).
* **Users already logged in with 2FA disabled for their profile**\
  Their 2FA becomes enabled, and Snyk asks them to enter the random code generated by the authenticator app installed on their device.
* **Users with 2FA enabled for their profile**\
  They do not notice a change because they already use 2FA.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.snyk.io/scan-fix-and-prevent/scan-with-snyk/snyk-api-web/managing-account/enforce-2fa-for-all-users.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.