> Index of every Falcon docs page, for assistants: https://falcon.com/docs/llms.txt

# How people sign in

On Security, choose email code, an authenticator app or passkey, and Google or Microsoft. There are no passwords.

In the company settings rail, choose **Security**. The heading is **Security**. The line under it is **How people sign in to Studio, and when it checks again.**

## Right now

**Right now** is the saved company policy. The note says **Saved company policy. Pending changes do not affect this summary.** It names the sign-in methods, whether a second step is required, and whether Google, Microsoft or single sign-on can satisfy both steps.

Each person sets up their own authenticator or passkey under their user menu, in **Sign-in & security**. The link on this page is **Your sign-in & security**.

## How people sign in

The section is **How people sign in**. The note is **Choose the ways in. There are no passwords.** Each switch saves at once. The section then says **Saved.**

| Way in | What the row says |
|---|---|
| Email code | A 6-digit code sent to their work email. Always on, so nobody is locked out. The row says Always on. It is not a switch. |
| Authenticator app or passkey | Optional. Once someone adds one, they can use it instead of waiting for an email. |
| Google or Microsoft | Recommended. Sign in with the company's Google Workspace or Microsoft 365 account. Their own security applies. One switch turns both on. |

Google uses that switch only. Security does not ask for a Google tenant ID or a Google approval link. Microsoft has its own section after the switch. See [Sign in with Microsoft](https://falcon.com/docs/microsoft-sign-in).

## What a way in does not do

- Turning a way on does not invite anyone. People still join by invitation, and an access level is chosen then. See [Access levels](https://falcon.com/docs/people-access-levels).
- A matching email does not link a Google or Microsoft account. On **Sign-in & security**, **Ways to sign in** says **Any of these gets you in. An account is only ever added here by you, never because its email matches.**
- When single sign-on is required, **Right now** says **Single sign-on is required. Only the designated recovery person may use an email code or passkey, if enabled.** With no recovery person it says **Single sign-on is required. No recovery person is configured.** The **Email code** row still says **Always on**. **Single sign-on** is the next section, and its button is **Set up**.

## Related

- [Sign in with Microsoft](https://falcon.com/docs/microsoft-sign-in)
- [Require a second step](https://falcon.com/docs/require-a-second-step)
- [Verify a work domain](https://falcon.com/docs/verify-a-domain)
- [What a trusted domain does](https://falcon.com/docs/trusted-domain-access)
- [Access levels](https://falcon.com/docs/people-access-levels)
- [Company settings](https://falcon.com/docs/company-settings)