Set up two-factor authentication

Set up two-factor authentication in Mailchimp — with the four heights of help laid out: do it now, make it easier for the next person to accept, work out the right move when you are stuck, and learn the pattern so it stops coming back.

4prompt heights
Open it in the interactive atlas →

The four heights

The same task, four distances: today's deadline, the next reviewer, the stuck moment, the pattern.

Execute — do the immediate task

+
Require two-factor authentication for all accounts and enroll the team: force MFA for Priya,…
Require two-factor authentication for all accounts and enroll the team: force MFA for Priya, Carlos, Jenna, and me, and set email-based backup codes. Send the instructions and a compliance deadline of next Friday. Confirm everyone has completed enrollment and log the backup codes in the team vault only after they confirm.

Improve — make it easier to accept

+
Before I roll out mandatory two-factor, make adoption easier for nontechnical teammates: create…
Before I roll out mandatory two-factor, make adoption easier for nontechnical teammates: create step-by-step setup text for SMS and for authenticator apps, show which login flows will change, and highlight recovery options if someone loses their phone. Flag any enterprise SSO conflicts so IT can preclear them before the deadline.

Decide — diagnose the stuck moment

+
Melissa just lost her phone and cannot get into the account because we forced MFA last week. She…

someone lost their phone and is locked out of the account

Melissa just lost her phone and cannot get into the account because we forced MFA last week. She needs to send a campaign tonight and IT is out. I’m afraid to use Admin override because I don’t know if that will reset other settings or trigger security alerts. What’s the fastest safe route to restore her access for this campaign and preserve our security posture?

Become — change the pattern

+
Every time we enforce two-factor, a few teammates get locked out, we rush to generate recovery…

we mandate MFA and then scramble for recovery

Every time we enforce two-factor, a few teammates get locked out, we rush to generate recovery codes, and it becomes an emergency. I want a durable onboarding habit that prevents lockouts and keeps our security strong without adding friction to daily work. What one policy and one small training or asset will stop recurring MFA headaches?

Next to this one

Other email marketing work people do in Mailchimp.

Every task here came from the work, not from a feature list — which is why the prompts name what you want done and never the button that does it. The tool changes; the work does not.
Copyright © LLOS.ai · 2026 — original pedagogy, voice, and design — all rights reserved.

The rest of the map

Same library, five ways in.