Two-factor authentication (MFA)
Two-factor authentication (MFA) adds a one-time code from an authenticator app on top of your password. OuttaScope requires it for a small set of higher-risk actions, and simply suggests it everywhere else -- it never blocks you from paying.
Where it is required
You need two-factor authentication enabled before you can: manage your team (invite, remove, or change a teammate's role), upload, replace, or remove your business logo, or open the Account activity (logins) tab in Reports. If you try one of these without it enabled, Settings shows a short enroll prompt right there -- there is nothing to look up elsewhere.
Where it is only a suggestion
Starting a plan, upgrading, opening the Stripe billing portal, and confirming checkout never require two-factor authentication. If it is not enabled, you may see a small, dismissible suggestion to turn it on -- dismiss it and the button still works exactly the same.
Turning it on
In Settings > Account & Security, under Two-factor authentication, follow the prompt to scan a QR code with an authenticator app and confirm a code. Save the backup codes shown at that point somewhere safe -- they are the only way back in if you lose your device.
What happens next
Set it up once from Settings and every gated action above unlocks immediately -- no separate enrollment per feature.