MFA, sessions and sign-in alerts

Settings → Security & data is the studio's lock rail.

MFA

Two-factor authentication adds the second lock — a code from an authenticator app at sign-in. Each person enables it on their own profile (/admin → your avatar → My profile), and owners can see who has it on from the team dossiers. For anyone with access to the whole book, it should be non-negotiable.

Sessions

Every signed-in device shows as a session — what, where, when last seen. Anything unfamiliar, or the browser on the laptop someone left on a train: sign it out remotely. Sign out everywhere else resets your own presence to just the device in your hand.

Login alerts

Sign-ins from new devices can notify — so a credential gone walking is heard about the day it's used, not at stocktake.

Locking the doors further

An IP allowlist can pin back-office access to known networks (studio, home, VPN) — a strong lock for stable teams; skip it if you work from anywhere.

Staff passwords reset through a proper flow — never over a shoulder. And when someone leaves, offboarding in The Hands ends access and hands their book over in one motion.