Organization security
Set team password rules, require MFA for everyone, control session timeouts, and manage API keys.
What this is
Security settings are for your organization — rules that apply to the whole team, plus API keys for integrations.
Your personal password, email, authenticator app, and the list of devices where you are signed in live under Settings → My Account. See My Account.
Two-factor authentication (MFA) here means requiring the team to use it — not enrolling your own authenticator. Enroll your own app on My Account.
UI path: Settings → Security
Steps
Open organization security
Go to Settings → Security.
Set password rules for the team
Expand Password Policy. Choose minimum length, expiry, reuse limits, lockout after failed attempts, and character requirements. Click Save Changes.
Require MFA for the team
Expand Two-Factor Authentication. Enable the main toggle, then turn on Enforce MFA for all users if everyone must set up an authenticator. Choose Allowed Methods and Grace Period (days) as needed. Click Save Changes.
Set session timeouts
Expand Session Management. Set max concurrent sessions, session timeout, and absolute timeout. Optionally require re-authentication for sensitive actions or terminate sessions when a password changes. Click Save Changes.
Manage API keys (when available on your plan)
Scroll to API Keys. Create, copy, or revoke keys your apps use to call HousingStreet. Treat keys like passwords.
Handle your own login (My Account)
To change your password, email, authenticator, or revoke your device sessions, open Settings → My Account instead.
Expected result
Team members must follow your password and MFA rules. Sessions expire on the timeouts you set. API keys work for allowed integrations. Your personal login settings stay on My Account.
Related
- Personal profile, password, email, MFA enrollment, and active devices → My Account