Why this matters: Some actions on your UIID — writing to your Core ID or marking stored data as immutable — require an extra layer of confirmation beyond your everyday biometric sign-in. This is deliberate: the more permanent or sensitive an action is, the more it should require a conscious, verified step.
Where to enable it: Security Settings at uiid.me. If you administer an Organization UIID, treat enabling this as a baseline requirement for whoever holds administrative access, not an optional extra.
What it protects against: A stolen or borrowed device is a real risk even with biometrics enabled. A second factor means a single point of compromise isn't enough to take a high-impact action on your identity.
A practical habit: Enable it before you authorize any application or AI agent that might request write access to your Core ID, rather than after something goes wrong.
Questions about exactly which actions require which factor? [email protected] — the specific requirements can depend on your account configuration.