Two-Factor Authentication (2FA) is an excellent security tool that we always recommend. Most apps make it pretty easy to turn on 2FA, and Slack is no exception. Here's how to activate it and make yourself safer.
You must be logged in to your Slack workspace. Do this first in the Slack desktop app or at [yourworkspace] .slack.com. Click the arrow next to the workspace name, and then click Profile and Account.
Your account information is displayed on the right side of the screen. Click on the ellipsis (the three dots) and click "Open Account Settings" in the menu that appears.
Allows you to select your account settings, change notification settings, and make changes to your profile. To set up 2FA, click the expand button next to the two-factor authentication option.
Now click "Set up two-factor authentication".
Now you can choose how you want to get your 2FA codes. We recommend using an authentication app. We will show this process here. However, you can also use SMS, as it is better not to use 2FA at all.
Warning Word: We tested Slack 2FA on three different authenticator apps: Authy, Google Authenticator, and Microsoft Authenticator. All three worked well for a single Slack instance. However, if we added a second Slack instance, Authy and Google Authenticator correctly added it as the second account, but Microsoft Authenticator overwrote the first Slack account and blocked us. We used backup codes again, but it was not fun. So if you need to add 2FA to more than one Slack instance, we recommend Authy or Google Authenticator.
The first step in the process is the installation of Authenticator App, which we assume you have already done. In the second step, open your authentication app and add an account. Hold your phone camera on the QR code displayed by Slack and follow the instructions in your app. Finally, enter the code generated by your authentication app.
Slack displays a screen with security codes that allow you to access your account when you lose your phone. Keep a copy of these codes in a safe place (in a place that your phone does not seem to need to access).
Now your Slack account is set up and configured for 2FA. If you have the Slack app on your phone, you will receive a "magic link" via email that you can use to log in without having to enter a 2FA code. And that's it.
Want more 2FA quality? Also read our other instructions for Gmail, O365 and Apple ID.