Account Security & Two-Factor Authentication (2FA)
Protecting your company and client data is critical. missionX provides multi-layered security protections, including strict password complexity validation, SMS-based Two-Factor Authentication (2FA / MFA), and secure session verification.
Password standards & updates
To change your password, open your profile drawer and expand the Security section:
| Policy Rule | Requirement | Rationale |
| Minimum Length | At least 8 characters | Prevents brute-force dictionary guessing |
| Character Mix | Combination of lowercase letters, numbers, and special symbols | Ensures robust cryptographic entropy |
| Current Password Verification | Must enter existing password to confirm changes | Prevents unauthorized changes on unattended devices |
Two-Factor Authentication (2FA) setup
2FA adds an essential second verification barrier to your login flow by requiring a one-time code sent to your phone:
| Setup Step | Action Required | System Confirmation |
| 1. Verify Email First | Ensure your primary email address has been verified | Prerequisite before phone number enrollment is unlocked |
| 2. Enter Phone Number | Input your mobile number in standard international format (E.164) | Sends an immediate 6-digit SMS verification code |
| 3. Enter 6-Digit PIN | Type the received SMS code into the verification fields | Activates 2FA and protects all workspace logins immediately |
Organization 2FA Requirements: If an organization workspace has enabled mandatory 2FA, you will be prompted to complete phone verification before you are granted access to that organization's financial reports and project plans.
Sensitive action re-authentication
For security-critical actions (such as updating your primary login email, detaching saved credit cards, or deleting your account), missionX may require you to re-authenticate with your password or 2FA device to verify your identity.
Next steps
Learn about workspace departure and account termination in Account Deletion & Data Privacy.