Loading post…
NotionAnkit GuptaAnnouncement
Making password login safer on Notion
Summary
Notion is requiring a second step of verification for password login to protect against credential reuse from other site breaches, and this change will roll out in stages over the next few months. When users set or change a password, they will be guided to set up two-step verification via an authenticator app or phone number and should save the backup codes provided. Users who already have two-step verification on their password need no action, and those without a password can continue using passkeys, email codes, or SSO. For password-only users without two-step verification, Notion will provide notice and time to set up a second step before turning off password-only login; if they choose not to, another method like an email code can still grant access. Additionally, where Notion can verify that another working method exists, it plans to turn off password login for those unused passwords.
Context
Notion is requiring two-step verification for password login to protect against credential reuse from other site breaches.
Approach / What changed
Rolling out in stages: when users set or change a password, they are guided to set up two-step verification via an authenticator app or phone number. Users with existing MFA on their password need no action. Password-only users without MFA will receive notice and time to set up a second step before password-only login is turned off. Unused passwords will be turned off where another working method is verified.
Takeaways
Notion will require two-step verification for any new or changed password.
Users who already have two-step verification on their password do not need to take any action.
Password-only users without two-step verification will be given notice and time to set up a second step before password-only login is disabled.
FAQ
What happens if I don't set up two-step verification?
Notion will provide notice and time to set up a second step. If you choose not to, you can still log in using another method like an email code.
Do I need to do anything if I already have two-step verification?
No, you don't need to do anything. Your current setup remains valid.
What if I lose my device after setting up two-step verification?
You can use the backup codes you saved during setup. If you can't, contact Notion support.
Source and freshness
- Source
- notion.com
- Published
- Added to Yomu
Summaries are generated from the original by a language model. Check the original before relying on it.
Keep reading
Related reading
The Good Stuff
Paid picks we use ourselves. Links carry a referral code — a subscription through one earns us a commission at no extra cost to you.
The best engineering reads, once a week
One useful email. Unsubscribe anytime.