Security

Off: sign-in is the password, as always. Optional: each person can add a passkey (Face ID, fingerprint, Windows Hello, or a phone scanned from a computer) or an authenticator app on Sign-in Security, and is then asked for it. Required: everyone must use one (people without one set it up right after their password). A passkey can also be the whole sign-in. An admin can reset a person who lost their phone on Employees.

How long the link in a password reset email works, from 1 to 168 hours (7 days). It works once. Invite links still last 3 days.