Omnikyo/Help Center
How-to

Require two-step verification for your team

The owner can require everyone on the team to use two-step verification, and set up automatic sign-out for devices that have not been used.

বাংলায়: আপনি সেটিংসের Security পাতায় সবার জন্য টু স্টেপ ভেরিফিকেশন চালু করতে পারেন, তাহলে প্রতিটি টিম মেম্বারকে সাইন ইন করার সময় কোড দিতে হবে। আপনি কোনো মেম্বারকে সব ডিভাইসে আউট করতে পারেন যদি তারা তাদের ফোন হারিয়ে ফেলে বা চলে যায়।

Where to find it: Sidebar › Settings → Security (the owner only).

Who can do it: The business owner. The owner's Security page and the View Users permission are needed.

Before you start

Before you turn on two-step for your team, you must have it set up on your own account first. The owner always needs access, so Omnikyo requires you to have two-step on before you can turn it on for everyone else. If you have not set it up yet, the switch is disabled. The page shows a button Set it up that opens Settings → Profile and security.

Turn on two-step for your team

  1. Open Settings → Security.
  2. Under "Sign-in rules", find the switch Require two-step verification. It is off by default.
  3. Turn on the switch.
  4. A dialog asks "Require two-step for everyone?" with a count of how many people on the team do not have it yet. The message says "They'll be asked to set it up the next time they open Omnikyo."
  5. Press Require it to confirm.

The rule takes effect at once for new sign-ins. Team members who do not have two-step will see the setup screen at their next sign-in, asking them to set up an authenticator app before they can access the dashboard.

Turn off two-step for your team

  1. Open Settings → Security.
  2. Turn off the switch Require two-step verification.
  3. Save with Ctrl/Cmd + S or the save bar.

Team members no longer need a code when they sign in.

Set automatic sign-out for idle devices

Devices nobody uses for a long time can be signed out automatically overnight. This keeps your team's access safe if a phone is lost or left in a taxi.

  1. Open Settings → Security.
  2. Under "Sign-in rules", find Sign out unused devices. The default is Never.
  3. Choose how long: Never, After 7 days unused, After 14 days, After 30 days, After 60 days, or After 90 days unused.
  4. The rule checks at 03:17 (Dhaka time) every night. A device that has not been used longer than you set is signed out then.
  5. Save with Ctrl/Cmd + S or the save bar.

See your team's sign-in status

Under the "Team sign-ins" section, every member appears with:

  • A shield icon showing whether they have two-step on (filled shield) or off (empty shield).
  • Their name, email, and role.
  • The number of devices they are signed in on.
  • When they were last active.

A member with zero devices is not signed in anywhere on this business.

Sign someone out everywhere

If a team member loses a phone, leaves the business, or needs to reset their access, you can sign them out of every device at once.

  1. Open Settings → Security.
  2. Under "Team sign-ins", find the person.
  3. Press Sign out everywhere.
  4. A confirmation appears: "Sign <name> out everywhere?" with the count of devices. Press Sign out everywhere again.

Every device they were signed in on is signed out immediately. They still have access to the business — they just need to sign in again with their password and code.

When the rules are not yet active

If you see the message "These rules are switched on with the next Omnikyo update," the rule has been saved but is waiting for a system update to take effect. It will apply to the next sign-in after the update.

Questions people ask

If I require two-step, will my team members be locked out?

No. Team members without two-step will see a setup screen on their next sign-in, asking them to set up an authenticator app. They get the QR code and the option to type the setup key by hand. It takes a minute.

What happens if someone loses the authenticator device with two-step on it?

They can no longer sign in because they cannot generate a code. You, the owner, can sign them out everywhere on the Security page with the Sign out everywhere button. Then they can sign in again and set up an authenticator on a different device.

Can I choose which people need two-step?

No. The rule applies to everyone on the team. All members who do not have two-step are asked to set it up on their next sign-in.

Other ways people ask this

  • require two step everyone
  • সবার জন্য টু স্টেপ চালু করব কীভাবে
  • team security policy two step
  • sign out all devices member
  • auto sign out unused devices
  • idle device timeout set
  • টিম মেম্বার সব ডিভাইসে আউট করব
  • team member lost phone sign out

Related pages

Related guides

Checked against the product on 2026-10-02.