Making password login safer on Notion

At Notion, protecting your data is our top priority. Therefore, to enhance your account security, we’re making a change to password login on Notion: passwords will need a second step of verification. If you set or change a password, we’ll ask you to set up two-step verification (also known as MFA). For password users without two-step verification today, we’ll introduce it (alongside the other login methods we offer) in stages over the next few months.

People like to reuse passwords. When a password from another site is exposed, someone can try it on Notion too. A stolen password shouldn’t be a free pass into your account. At the same time, a second verification step is more than added security; it can also help you get back into your account if something else goes wrong.

This change isn’t rolling out all at once. When you set or change a password, we’ll guide you through setting up two-factor verification via an authenticator app or your phone number.

If you already have a password and two-step verification turned on, you don’t need to do anything. And if you don’t use a password, great! There’s no need to start now. You can keep using the login method that works for you, including passkeys, email codes, Google, Apple, Microsoft, or your organization’s SSO where available.

Some people have a password they haven’t used in a long time and already log in another way. Where we can verify that another method works, we plan to turn off password login for that unused password.

People who still rely on a password without two-step verification need a different approach. We plan to give them notice and time to set up a second step before turning off password-only login. We’ll share the deadline and instructions with affected people before it takes effect. If you choose not to set it up, another available login method, such as an email code, can still get you into Notion. This change applies to password login only.

You don’t need to wait for a prompt. If you use a password, you can set up two-step verification now:

1. Open Settings in Notion and select your name.

2. Under Account security, select Add verification method next to Two-step verification.

3. Choose Code from authenticator or Text me a code, then follow the prompts. Text-message setup may not be available in every region.

4. Save the backup codes you receive during setup somewhere you can find them. You’ll need them if you lose your phone or verification device.

If you’d rather not use a password, you can log in with an email code or use a passkey or another available method. You don’t need to create a password to keep using Notion.

If your password login is turned off, try logging in with a code sent to the email address on your Notion account, or use a login method you’ve already connected. If you’ve set up two-step verification and lost your device, you can use one of the backup codes you saved. If you can’t receive email at the address on your account or your other login methods aren’t working, contact our support team.