Settings

Overview

Enhance the security of your Employee Vault by setting up two-factor authentication (2FA) for current and former employees.

---

Two-Factor Authentication (2FA) Settings

Enhance the security of your Employee Vault by setting up two-factor authentication (2FA) for both current and former employees. Admins can select from three 2FA options: 2FA token over email, 2FA token via Google Authenticator, or no 2FA.

For those choosing 2FA over email, the default token validity is 15 minutes, but this can be adjusted. By default, 2FA is required until the next login, but vault admins can set a more aggressive policy, requiring 2FA after intervals of 15 minutes, 30 minutes, 1 hour, 1 day, 1 week, or 1 month. These intervals can be set differently for current and former employees to meet specific security needs.

Set Different Policies for Current vs. Former Employees

Customize the 2FA time policy separately for current and former employees to meet your security requirements.

Notes on 2FA Settings

The selected 2FA channel becomes the default channel for sending the 2FA token. Users still have the option to switch to the other channel.

For example, if "2FA Token over Email" is selected, the user will receive the 2FA token via email the first time they access the vault post-login. They can choose to use the email token or switch to Google Authenticator by clicking the "Use Google Authenticator Instead" link and entering the token from the Google Authenticator app.

---

Vault Retention Policy

The vault retention policy allows admins to set how long files are retained in the Employee Vault for both current and former employees. Two options are available: keeping files forever or specifying a number of days after which files are deleted from the vault.

Admins can customize retention periods separately for current and former employees to ensure compliance with organizational policies and legal requirements.

Different Policies for Current vs. Former Employees

Set distinct retention periods for current and former employees to ensure compliance with organizational and legal requirements.

---

By configuring these settings, you can enhance the security and manage the lifecycle of documents within the Employee Vault, ensuring that sensitive information is protected and retained according to your policies.