Set up two-factor authentication

Set up two-factor authentication for the page admin account I use. Enroll my phone number for SMS backup, enable an authentication app as the primary second factor, set the recovery codes in the owner's secure notes, and confirm I can still post and manage ads before the end of day so we don't lose access.

Before I enable two-factor on the admin account, make it as painless as possible for our small team: explain exactly which staff need the auth app installed, prepare step-by-step copy we can send them, note how to add an alternate phone for recovery, and flag any blockers that would make the owner hesitate to approve immediate enforcement.

I turned on two-factor authentication for our page admin using an authentication app and the assistant who schedules posts can no longer access the account. The assistant says they didn't get set up and the owner is frustrated because scheduled posts are missing. I cannot tell whether to roll back two-factor or add the assistant now. What's the safest immediate step so we regain posting ability without weakening security?

Every time we tighten account security, one team member loses access and our posting schedule collapses. I need a small-team process that prevents lockouts but keeps the page secure. Which two habits should we implement around admin roles, recovery contacts, and testing so security changes don't stop operations?