Admins can require everyone in a workspace to prove it's them with a second step, verified only when signing in, each time Freesbe opens, or every 12 hours, day or week. People use a passkey, an authenticator app, an emailed code, or tap a number on their phone. Signing in with a passkey, Google or Microsoft counts by itself.
For Any company where a password alone shouldn't open the chat.
Switch on Require multi-factor authentication under Security & compliance, Sign-in. If you haven't verified in this session, Freesbe asks you to first. Under Ask again, choose only when signing in, each time Freesbe opens (a new desktop app start or a new browser tab, not a reload), or every 12 hours, every day or every week. Anyone who hasn't verified is signed out of that workspace at once and sees Verify it's you next time.
Turn on Approve sign-ins in the Freesbe app on your phone and it becomes your second step. When a computer asks, the phone shows where the sign-in is from and three numbers; tap the one on the computer and confirm with your fingerprint or face. It works for the web app, the desktop app and the mobile app, on every plan. Didn't start it? Tap Deny, and phone approval pauses for 15 minutes. Once set up, you can skip the password altogether.
Start free with up to 10 people and try it today, or book a 20-minute demo with the people who make Freesbe.
A passkey is your fingerprint, face or device PIN, with nothing to type; a banner in the browser suggests one until you add it, and the phone app adds one from the You tab. An authenticator app like Google Authenticator, Microsoft Authenticator, 1Password or Authy gives a six-digit code that changes every 30 seconds. Emailed codes work for ten minutes. Someone with nothing else sets up a passkey or an app on the spot, and that counts.
Opening the Admin Center takes a second step on every plan, even when the workspace doesn't require MFA, and out of the box it has to be a strong one: a passkey, approval on your phone, or a code from your authenticator app. An emailed code or a password isn't enough, so someone who gets into an admin's email still can't get in. An admin without one is helped to set it up right there. A sign-in lasts 12 hours.
Each sign-in, second step and failed attempt, and every passkey, app or phone added or removed, shows in Security activity with the browser and the address it came from. People see their own in Preferences; admins see the whole team's, filter it by member, event or month, and export it. Changes to the rule itself go in the audit log.
Multi-factor authentication and passkeys is included in Business, Corporate and Enterprise. Anyone can turn on a second factor on any plan; requiring it for everyone needs Business.
The help guide shows every screen and setting. Multi-factor authentication
No card, no time limit. Invite your team and see what sticks.