1. Enforce 2FA for all administrative accounts

Administrative users typically have elevated privileges within NIZU WorkSpace Cloud.

Always enable Two-Factor Authentication (2FA) for every admin account to prevent unauthorized access, even if a password is compromised.

This small measure significantly enhances overall platform security.

2. Encourage clients to activate 2FA voluntarily

While 2FA can be optional for clients, encouraging them to enable it strengthens the security of your ecosystem.

Provide brief guidance or a reminder in the client portal login page or welcome emails to promote adoption.

3. Use time-synchronized devices

2FA relies on Time-based One-Time Passwords (TOTP).

Ensure that all users — especially administrators — keep their mobile device clocks synchronized automatically via the network.

This prevents “invalid code” errors and reduces authentication friction.

4. Maintain secure recovery and reset procedures

2FA recovery requests should always be approved by a trusted administrator.

Avoid automated resets without verification to prevent potential social engineering attacks.

Each reset should be logged and auditable through the Security Logs in the admin panel.

5. Regularly review user 2FA status

Administrators should periodically check which users have 2FA enabled.

Use the Security Dashboard or User Management module to identify accounts without 2FA, and enforce enrollment where necessary.

6. Educate users on backup and recovery options

Encourage users to safely store backup codes (if enabled) or link their Authenticator App to a cloud account that supports secure recovery.

This ensures minimal disruption if a device is lost or replaced.

7. Keep your Authenticator App up to date

Authenticator apps are security tools, and updates often include improved encryption or protection mechanisms.

Always run the latest version of your chosen Authenticator (Google Authenticator, Microsoft Authenticator, Authy, etc.) to benefit from the latest security enhancements.

Adding this section creates a complete end-to-end documentation piece — from setup and operation to support and security best practices — giving both admins and users clear, actionable knowledge.