Team & Access

Two-factor authentication, per account

Every account — admin or employee — can turn on email-based 2FA independently, right from the Users list, with a single checkbox next to their name.

2FA doesn't require an admin to enable it company-wide first: each employee's protection is their own setting, so a finance lead handling sensitive invoices can turn it on without waiting on IT policy to catch up.

Because it's email-based, there's no authenticator app to install or backup codes to lose — the second factor arrives wherever the account's email already goes.

Security that doesn't need a company-wide rollout.

WTM is free and open source under AGPL-3.0. Self-host it and turn on 2FA for your own account.

Get started