Shed can ask for a six-digit code as well as a Microsoft or Google sign-in, when someone uses a browser it has not seen before or signs in from a country you have not approved. Once they type the code, that browser is remembered for 90 days. Set it in Settings, then Permissions.
With country checking on, a sign-in from a country you have not approved is held until the person types a code. Once they do, that country is open to them for 90 days, which covers a trip. Shed looks the country up on its own server from a local database, and never keeps the address itself.
A page asking for the code Shed has just emailed them. The code lasts 15 minutes and allows three tries. Nobody can ask for more than five codes in an hour. After fifteen wrong codes in a row, that person is locked out of codes until an Admin clears it, which is there to stop someone else guessing at their address.
Anyone can see and remove their own remembered browsers in Settings, then Account: useful when a laptop is sold or lost. Shed forgets them for you when a person is suspended, removed, or moved to a lower level.
The Permissions page lists held sign-ins from the last 30 days, and whether each ended with the right code typed, a wrong one, or nothing. Every step shows in Activity. For who may do what once they are in, see Invite someone and choose what they can do.
Tell us which libraries or drives are full and roughly how large they are. We size a shed, set up the first sweep with you, and most are running within a week.
Ask for a shed