Two-factor authentication (2FA) adds a temporary code to your password. Even if your password leaks, no one gets in without your phone. On Sanctumel it relies on an authenticator app (Google Authenticator, Authy, 1Password...).
Enable 2FA on my account
- Open Settings > Security.
- In the Two-factor authentication card, scan the QR code with your app.
- Enter the 6-digit code to confirm.
- Keep the backup codes shown: they help if you lose your phone.
When 2FA becomes mandatory
2FA is not forced by default. A brand-new church with no data or money has nothing to protect: requiring it would only add friction. You then see a gentle, non-blocking banner you can dismiss.
2FA becomes mandatory for admins and sensitive roles as soon as the church has real stakes, based on sensitivity criteria:
- Money at stake: Sanctumel Pay active, or at least one financial transaction.
- Real member base: from 25 members (beyond a mere test account).
- Children's data: Sunday-school (ecodim) students are recorded.
- Network plan or multi-campus.
Important: once any of these is met, a 7-day grace period opens (banner with countdown) to enable 2FA. After that, access is restricted to the Security page until it is enabled. For the Network plan or if the church enabled strict security, 2FA is required immediately, with no grace.
Note: no one is ever locked out. The Security page always stays accessible to enable 2FA, even after the delay.
Enforce it for the whole team (church admin)
An admin can require 2FA permanently for the whole team, regardless of data level:
- Settings > Security > Require 2FA for the team, toggle it on.
- Sensitive roles (pastor, treasurer, finance) must then enable it immediately.
Extra confirmation on sensitive actions (step-up)
Some dangerous actions require re-authentication at the moment of the act, even if you are already logged in: for example, requesting the full data export. You then enter your 2FA code (or your password if you have not enabled 2FA) to confirm. A stolen session alone is not enough to trigger the action.
Lost phone
Use a backup code to sign in, then reconfigure 2FA from Security. If you have no codes left, contact support.