Two-step verification and passkeys

Settings → Account and security. Turn on two-step verification with an authenticator app (1Password, Authy, your phone's built-in one) and save the 10 backup codes. Passkeys let you sign in with Face ID, Touch ID or Windows Hello without a password.

Two-step verification is required for workspace administrators. Mailbox passwords are separate and never change here.