Require two-step verification for your crew
Owners and admins can require an authenticator code for everyone on the company: Settings → Security → Require two-step verification. From then on, anyone on the crew without it is sent to set it up the next time they open Towhub, and the workspace stays closed until they do. Businesses have the same switch on their Team page.
Two things to know before flipping it:
- Turn it on for your own account first. The switch is disabled until you have, so you can't lock yourself out.
- Drivers included. A driver who loses their phone can't clock in until an admin resets it (see below), so tell the crew before you switch it on and give them a day.
What it protects
Your login is the door to pricing, payouts, crew, customer records and every job's paper trail. Two-step verification means a leaked or guessed password isn't enough. Towhub already requires it for payout settings; requiring it company-wide closes the rest.
Someone lost their phone
They email support@towhub.co from their account's address; we confirm it's them and remove the authenticator. They sign in with their password and set it up again. Owners can't do this themselves yet — it's a deliberate check.
Turning it off
Same switch. Nobody's authenticator is removed; it just stops being required.