The Owner turns on two-factor sign-in for their own login first, under Security.
On Team, an Owner or Admin switches on Require for everyone on this account.
From then on, anyone on the account without two-factor sign-in is taken to Security to turn it on before they can carry on. Two-factor here means an authenticator app; passkeys don't count toward it.
Did this guide help?
Glad it worked. Thanks for letting us know.
Sorry about that. Tell us where you got stuck and we'll help, and fix the guide. Contact support