This article explains why users may encounter MFA lockout errors when attempting to log in to Salesforce.
Agentforce Sales (formerly Sales Cloud) and Agentforce Service (formerly Service Cloud) users may encounter the following error when attempting to validate with MFA during log in:
"Error: You've exceeded the allowed number of attempts."
This error occurs as a result of multiple failed MFA attempts, and will lead to a temporary MFA lockout.
While the temporary lockout behavior is expected and cannot be disabled, there are ways to regain access when it occurs. To recover from a temporary MFA lockout, use one of the following methods to regain access to your account. :
Wait for one hour and try logging in again.
The lockout is automatically unlocked after approximately one hour.
Use a Temporary Verification Code generated by a System Administrator.
If you are using the Salesforce Authenticator app, enter the 6-digit code displayed in the app.
If you have registered multiple MFA verification methods (e.g., another authenticator app or a security key), use one of the alternative verification methods.
000395009

We use three kinds of cookies on our websites: required, functional, and advertising. You can choose whether functional and advertising cookies apply. Click on the different cookie categories to find out more about each category and to change the default settings.
Privacy Statement
Required cookies are necessary for basic website functionality. Some examples include: session cookies needed to transmit the website, authentication cookies, and security cookies.
Functional cookies enhance functions, performance, and services on the website. Some examples include: cookies used to analyze site traffic, cookies used for market research, and cookies used to display advertising that is not directed to a particular individual.
Advertising cookies track activity across websites in order to understand a viewer’s interests, and direct them specific marketing. Some examples include: cookies used for remarketing, or interest-based advertising.