Turn on two-factor authentication

I need to lock down my creator account. Turn on two-factor authentication for the account registered to claire@lumenphoto.com and require a verification code for login attempts from new devices, sending codes by SMS to +1-415-555-0198 first and offering the authenticator-app option second. Confirm the change by emailing me and list any recovery codes shown so I can store them in our vault.

Before I force two-factor on every user, make it easy for followers and staff to comply: surface the current phone number and authenticator options at the top, explain how recovery codes work in one short sentence, and flag any linked devices or app passwords that will break if we enable it now.

I just turned on two-factor authentication for claire@lumenphoto.com and sent the first code to the studio phone. The assistant photographer, Marco, says he can’t receive codes and needs access for a shoot tomorrow morning. I don’t know if his device is on the account or if he has the recovery codes, and I’m afraid of locking him out and missing the job. Should I add his phone as a backup, send him a recovery code now, or roll back the setting and risk security? What’s the least disruptive next step?

Across several shoots we lose access at the worst moment because two-factor wasn’t agreed with the team. How should I change our routine so every contractor has a predictable way in without weakening security? Recommend one immediate habit and one checklist item for pre-shoot setup that stop this from becoming a recurring emergency.