Security
Protect your account with two-factor authentication, passkeys, and active-session controls.
Your security controls live on the Account → Profile page, below your identity. Use them to add a second sign-in factor and to see where you're signed in.
Turn on two-factor authentication
- In the Two-factor authentication card, click Enable.
- Scan the QR code with an authenticator app (1Password, Authy, Google Authenticator).
- Enter the 6-digit code to confirm.
- Save the one-time recovery codes somewhere safe.
Recovery codes are the only way back in if you lose your device. Workspace them somewhere secure — you won't be shown them again.
If your organization requires two-factor authentication and you haven't enabled it yet, Mercel sends you here with a notice to set it up before you can continue.
Add a passkey
Passkeys let you sign in with Touch ID, Face ID, or a hardware security key instead of a password.
- In the Passkeys card, click Add passkey.
- Follow your browser's prompt.
- Give the passkey a recognizable name (for example, "MacBook Touch ID").
You can register several passkeys and remove any of them later from the same card.
Review active sessions
The Active sessions card lists every device signed into your account, with its browser, location, and last-active time. Your current session is marked This device.
- Click Revoke on any other row to sign that device out immediately.
- Click Revoke all other sessions to sign out everywhere except where you are now.