diff --git a/doc/onboarding.md b/doc/onboarding.md
index 1d478fb054e995..a30f4dd9efbd03 100644
--- a/doc/onboarding.md
+++ b/doc/onboarding.md
@@ -3,6 +3,14 @@
 This document is an outline of the things we tell new Collaborators at their
 onboarding session.
 
+## One week before the onboarding session
+
+* Ask the new Collaborator if they are using two-factor authentication on their
+  GitHub account. If they are not, suggest that they enable it as their account
+  will have elevated privileges in many of the Node.js repositories.
+
+## Fifteen minutes before the onboarding session
+
 * Prior to the onboarding session, add the new Collaborators to
 [the Collaborators team](https://github.com/orgs/nodejs/teams/collaborators).