Two-factor authentication

Turn on 2FA under Settings → Security with any authenticator app. Workspace owners can require it for every seat.

Recovery codes are shown once at setup — print them and put them in the drawer with the truck keys.