Generate a Temporary Verification Code for MFA Logins to Salesforce Orgs

If a user forgets or loses the identity verification method that they use for multi-factor authentication (MFA), generate a temporary verification code so they can log in while you sort out the issue. You can control how long codes are valid, up to 24 hours. A user can log in multiple times with their code until it expires. Temporary verification codes are valid for MFA only. They can’t be used for device activation, when a user must verify their identity because they’re logging in from an unrecognized browser or app.

Required Editions

Available in: both Salesforce Classic and Lightning Experience

Available in: all editions

User Permissions Needed
To generate a temporary verification code:	Manage Multi-Factor Authentication in User Interface

Important

Salesforce enforces MFA requirements in the summer of 2026. See these articles for more information and detailed rollout timelines.

• Prepare for MFA Enforcement for All Employee Users.
• Prepare for Phishing-Resistant MFA Enforcement for Privileged Users including Admins.

1. From Setup, use the Quick Find box to find and select Users.
2. Select the name of the user who needs a temporary verification code.
   

   Note Click the user's name directly. Don't click Edit— it brings up a different view that doesn't have the option to generate a code.
   
3. Find Temporary Verification Code, then click Generate.
   
   If you don’t already have a session with a high-assurance security level, Salesforce prompts you to verify your identity.
4. Set a code expiration time from 1 to 24 hours, then select Generate Code.
5. Give the code to your user. Tell your user to go to the Salesforce login page and enter their username and password. Salesforce then prompts the user to enter the verification code.
6. Select Done.
   

   Important After selecting Done, you can’t return to view the code again, nor is the code displayed anywhere in the user interface.

Keep these considerations in mind when issuing temporary verification codes.

• A user can log in with the same code as often as needed until the code expires.

• Each user can have only one temporary verification code at a time.

• If a user forgets or loses a code before it expires, you can manually expire the old code and generate a new one.

• You can generate up to six codes per hour for each user.

• You can’t generate a code for an inactive user.

See Also

• Expire an MFA Temporary Verification Code for Salesforce Orgs