Register MFA Without a Mobile Device Using Alternative Verification Methods

You can register for Multi-Factor Authentication (MFA) without a mobile device using one of the following methods:

Using Security Keys for MFA

A WebAuthn or U2F-compliant security key must be purchased separately.

• Admin Setup: To enable security keys in your organization, refer to the Salesforce Help article "Enable Security Keys for Identity Verification in Salesforce Orgs" for configuration.
• User Registration: Once enabled in the organization, users must refer to the Salesforce Help article "Register a Security Key as an Identity Verification Method for Salesforce Orgs" to register their security key.

Using Built-in Authenticator for MFA

This method can be used if your PC has built-in biometrics (such as fingerprint or facial recognition) like Touch ID, Face ID, or Windows Hello.

• Admin Setup: To enable a Built-in Authenticator in your organization, refer to the Salesforce Help article "Enable Built-In Authenticators for Identity Verification in Salesforce Orgs" for configuration.

• User Registration: Once enabled in the organization, users must refer to the Salesforce Help article "Register a Built-In Authenticator as an Identity Verification Method for Salesforce Orgs" to register the Built-in Authenticator.

Using a TOTP Desktop Authenticator App or Browser Extension for MFA

If this option is the only means available to the user, they can use a third-party TOTP desktop authentication application or browser extension that generates time-based one-time password (TOTP) codes.

• Requirement: Any authentication application that generates temporary codes based on the TOTP algorithm by OATH (IETF RFC 6238) can be used.
• User Registration: Users must refer to the Salesforce Help article "Register a Third-Party Authenticator App as an Identity Verification Method for Salesforce Orgs" to register the authenticator application.