How do I check who has two-factor authentication enabled?

The team list shows a Two-factor column with Enrolled, Not required or Setup required, alongside Last Login, Joined and Account status (Active, Inactive, Pending).

You can require it firm-wide — see How do I enforce two-factor authentication for my whole firm?