Automatic check
Check your Microsoft 365 or Google Workspace in a minute.
Sign in as an administrator and we'll read your settings to see whether two-step verification is on for everyone, and whether your admin accounts are set up safely. Read-only, and the results stay in your browser.
Microsoft 365
Checks security defaults and Conditional Access, who has set up two-step verification, admin accounts and guests.
Google Workspace
Checks 2-Step Verification enrolment and enforcement, super admins and accounts nobody has used for 90 days.
What we can see
- Whether two-step verification is enforced
- Who has and hasn't set it up
- How many admin accounts you have
- Guest or unused accounts
We can't read emails, files, calendars or passwords, and we can't change anything.
How your data is handled
The check runs entirely in your browser. Microsoft or Google gives your browser a short-lived, read-only key, which is used to fetch your settings and then discarded. Nothing is sent to Brightlock. The results, including the names of anyone who needs to act, are saved only on this device so they can appear in your report. You can delete them at any time.