> AI agents: this is one page from Mammoth Analytics documentation. The index of all pages as Markdown is https://mammoth.io/docs/llms.txt. Append `.md` to any docs URL, or send `Accept: text/markdown`, to get Markdown.

# Sign in, reset your Mammoth password and set up 2FA

> Ways to sign in to Mammoth, password rules, resetting a forgotten password, turning on two-factor authentication, and getting SSO or enforced 2FA on request.
>
> Applies to: Personal 2FA is part of the Pro plan; SSO, workspace-wide 2FA and IP allowlisting are set up by Mammoth on request. Where: Profile Settings › Security

You sign in to Mammoth with email and password, and can add two-factor authentication (2FA) in **Profile Settings** → **Security** on the Pro plan. SSO, workspace-wide 2FA and IP allowlisting aren't settings in the app: Mammoth sets them up on request.

## Ways to sign in to Mammoth

Mammoth supports four authentication methods, managed through Keycloak, an identity provider (the service that checks who you are).

| Method | Use case |
| --- | --- |
| **Email / password** | Individual users and small teams |
| **Enterprise SSO (SAML/OIDC)** | Organisations with an existing identity provider (set up by Mammoth on request) |
| **Two-factor authentication (TOTP)** | A second step on top of your password (Pro plan) |
| **API token** | Automated workflows, integrations and service accounts |

## Password requirements

- At least 12 characters.
- At least one letter.
- At least one digit.
- At least one symbol (except `"` and `\`).

## Reset a forgotten password

1. Click the forgot-password link on the sign-in page.
2. Enter your email address.
3. Open the temporary reset link in your email.
4. Set a new password that meets the requirements above.

You can then sign in with the new password. To change your password while signed in, use **Reset password** under **Security** in [Profile Settings](https://mammoth.io/docs/learn/workspace/profile/).

## Set up two-factor authentication

Two-factor authentication (2FA) adds a time-based one-time password (TOTP) from an authenticator app to your sign-in. Personal 2FA is part of the Pro plan. On the Free, Starter and Team plans, clicking **Enable 2FA** opens an upgrade prompt instead of the setup screen.

> **Important:** Enabling 2FA is permanent and cannot be undone. Once enabled, two-factor authentication cannot be disabled on your account.

1. Open your account menu in the left sidebar and select **Profile Settings**.
2. Under **Security**, find the **Two-factor authentication** row.
3. Click **Enable 2FA**.
4. The **Enable Two-Factor Authentication** screen opens with the warning "This action can't be undone." Click **Enable 2FA** to confirm, or **Cancel** to go back.
5. The page reloads. Follow the prompts to register your authenticator app.

The **Two-factor authentication** row shows **2FA Enabled**. Every sign-in now asks for your password and a current one-time code.

## Get SSO, workspace-wide 2FA or IP allowlisting

These aren't settings in the app. Mammoth sets them up on request: contact [support@mammoth.io](mailto:support@mammoth.io) or your account manager.

| Feature | What it does |
| --- | --- |
| Enterprise SSO (SAML/OIDC) | Lets your organisation sign in with its existing identity provider |
| Workspace-wide 2FA | Requires 2FA for every member. New users have a 2-day grace period from account creation before they must set it up |
| IP allowlisting | Limits sign-in to your organisation's network addresses |
| VPC deployment | Runs Mammoth in a private network. Also set up by Mammoth on request, not a setting in the app |

When workspace-wide 2FA is turned on, the [Activity Log](https://mammoth.io/docs/learn/workspace/audit-logs/) shows it under **Workspace** with the detail "Two-factor authentication is now required for all users".

## Related

- [Security](https://mammoth.io/docs/learn/workspace/security/): sessions, encryption and certifications.
- [Your profile](https://mammoth.io/docs/learn/workspace/profile/): change your password and turn on 2FA.
- [Audit logs](https://mammoth.io/docs/learn/workspace/audit-logs/): see when workspace-wide 2FA was turned on.

---
Source: https://mammoth.io/docs/learn/workspace/sign-in-and-2fa.md · Updated: 2026-11-08