Users
How many people can sign in to the account.
- Free · Professional
- 1
- Team
- 10
- Team Plus
- 25
- Enterprise
- 100
- Non-Profit
- 1
Invite colleagues by email under Settings > Team. Remove a user or an invitation at any time.
Two-Factor Authentication
A second step at password login: authenticator app or passkey, plus recovery codes.
- Free
- No
- Professional · Team · Team Plus · Enterprise · Non-Profit
- ✓ Yes
Set it up under Settings > Login Security. A password login then asks for one of:
- Authenticator app — a six-digit code generated in an app or a password manager
- Passkey — stored on your phone, in a password manager, or on a hardware key
- Recovery code — when you have lost your app or passkeys; each code works once. Keep them in a safe place, away from the devices you log in with
Until you create recovery codes, a code sent by email can replace the second step. After that, email codes are off.
Google and Microsoft logins use the protection of those accounts instead.
User Roles
Give each user a role: Account Admin, Onelink Editor or Team Member.
- Free · Professional
- No
- Team · Team Plus · Enterprise
- ✓ Yes
- Non-Profit
- No
Choose a role when you invite a user, and change it under Settings > Team:
- Account Admin — full access, including users, billing and security settings
- Onelink Editor — creates and changes Onelinks and where they send visitors
- Team Member — sees links and statistics, and designs and downloads QR codes
An account always has at least one Account Admin. An Account Admin can log a user out on all devices, and issue a one-time recovery code to a user who has lost their second factor.
Security Policy
Set login methods, required two-factor and session length for all users.
- Free · Professional
- No
- Team · Team Plus · Enterprise
- ✓ Yes
- Non-Profit
- No
An Account Admin sets the policy under Settings > Security Policy. It applies to all users and sets:
- Login methods allowed: email and password, Google, Microsoft
- Whether Google and Microsoft logins must be organization-administered accounts
- Whether password logins require two-factor, and which second factors are accepted
- Session length: users log in again every 24 hours, 7, 30 or 60 days
Users marked External User under Settings > Team follow separate login methods. Users logged in with a method you turn off must log in again.
Google & Microsoft login
Sign in with your existing Google or Microsoft account — no separate password needed.