We recommend that everyone in your busin= ess use 2-Step Verification (2SV), but it=E2=80=99s especially important fo= r admins and users who work with sensitive data such as financial records a= nd employee information. If someone steals a password, 2SV can prevent them= from accessing your account.

With 2SV, users need to verify their identity through something they kno= w (their password) plus something they have (such as a physical key or acce= ss code). You should enforce 2SV for admins and key users, where possible w= ith a FIDO compliant security key.

Protec= t your business with 2-Step Verification | Dep= loy 2-Step Verification

A business should have more than one sup= er admin account, each managed by a different person. If your primary super= admin account is lost or compromised, the backup super admin can perform c= ritical tasks while the primary account is recovered. You can create anothe= r super admin by assigning the super admin role to another user.

Assign= administrator roles to a user

Super admins should sign in as needed to= do specific tasks and then sign out. Staying signed in to a super admin ac= count when not performing specific administrative tasks can increase exposu= re to malicious activity.

Daily administrative tasks should be don= e using an account with limited admin roles.

Pre-built administrator roles | Security best = practices for administrator accounts