Workspace settings › Security has two choices for owners, each confirmed with a fresh code or password and recorded in the audit log: require two-step sign-in — codes from an authenticator app, a passkey the sign-in used, or the workspace’s own single sign-on — and how long a session lasts before its person signs in again, from 12 hours to two weeks, or the default 30 days.
Members shows who has two-step sign-in on, and Sign out ends a member’s sessions in the workspace on every device. Somebody the workspace holds out stays signed in to their account and their other workspaces, gets no notifications from it, and is told why — and how to get back in — when they next open it.
Signing a phone out, from the phone itself, from your other sessions or with a new password, also stops its notifications, and a notification’s Mark as read and Reply now work once, from the device it reached.