<script type="application/ld+json">{"@context":"https://schema.org","@type":"TechArticle","headline":"Security and account deletion","description":"Setting up two-factor sign-in, and how to remove a member or close a workspace.","dateModified":"2026-07-12","inLanguage":"en","author":{"@type":"Organization","name":"HarperFlow"},"publisher":{"@type":"Organization","name":"HarperFlow","url":"https://www.harperflow.io","logo":{"@type":"ImageObject","url":"https://www.harperflow.io/favicon.png"}},"mainEntityOfPage":"https://www.harperflow.io/docs/security-and-account-deletion"}</script>
Docs
/
Billing & Account

Billing & Account

Security and account deletion

Setting up two-factor sign-in, and how to remove a member or close a workspace.

July 11, 2026

Two ways to lock things down: securing how you sign in, and removing access or workspaces you no longer need. Neither one requires digging through settings you'll never touch again.

Two-factor authentication

From your Profile page, you can add a second sign-in step on top of your password:

  • An authenticator app: scan a QR code with an app like Google Authenticator or Authy, then confirm with the 6-digit code it shows.
  • A passkey: use Face ID, Touch ID, or a hardware security key instead of a code.

Once you've enrolled either one, HarperFlow requires that second step at sign-in before you can reach the rest of the app. A password alone is no longer enough. If you ever lose access to your authenticator app or passkey, contact support: the team can clear your enrollment as a lockout backstop so you can sign in and set it up again.

Removing a teammate

Covered in more detail in Team members and roles, but worth repeating here: removing someone is a real access change, not just a cosmetic one. It takes effect immediately, cutting their access across every workspace under the account and signing them out, rather than just hiding their row on the Members page. You can always invite them back later if the removal was a mistake or their role changes.

Closing a workspace

A workspace (organization) with no connected site can be removed entirely. If it still has a site attached, disconnect or delete that site first. You also can't remove the workspace you currently have open. Switch to another one first, then remove it from there. Removing a workspace cancels any subscription still attached to it and clears its data.

Warning: Closing a workspace is permanent once submitted. Make sure you've disconnected its site and are certain before you remove it. There's no undo.