Loading

How to Set Up Salesforce Authenticator for MFA

Veröffentlichungsdatum: Apr 14, 2026
Beschreibung

Salesforce Authenticator is a mobile app used to verify your identity as part of Salesforce's Multi-Factor Authentication (MFA) requirement. MFA adds a second layer of security beyond your username and password. This article provides step-by-step instructions for setting up Salesforce Authenticator for the first time, migrating to a new device, and reconnecting after a disconnection.

NOTE: The screenshots in this article were taken from version 4.7.0. If you are changing devices, refer directly to the "Migrate Salesforce Authenticator to New Device" sections of this article.

Lösung
As a preliminary step, install Salesforce Authenticator on your mobile device from the App Store (iPhone) or Google Play Store (Android) before proceeding with any of the sections below.When you open the Salesforce Authenticator app for the first time, a tour will be displayed. Tap [Next] to proceed through the tour. You can also skip the tour by tapping [Skip] in the upper right corner. Once complete, confirm the main account screen is displayed, then set the app aside.

Set Up Salesforce Authenticator (First Time Setup) :

This section applies to:

  • New users connecting to Salesforce Authenticator for the first time
  • Users reconnecting on the same or a new device after previously disconnecting their verification method
Step 1: Log in to Salesforce from your browser using your username and password.
(Screenshot: Salesforce login screen displaying username and password fields)

Step 2: When the "Choose a Verification Method" screen appears, select [Use the Salesforce Authenticator mobile app] and click [Continue]. Confirm that the "Connect Salesforce Authenticator" screen is displayed showing a two-word phrase, then set your browser aside.
 
NOTE: Depending on your organization's settings, the "Connect Salesforce Authenticator" screen may appear immediately after logging in.
(Screenshot: "Choose a Verification Method" screen with Salesforce Authenticator option selected)
(Screenshot: "Connect Salesforce Authenticator" screen displaying a two-word phrase)

Step 3: On the Salesforce Authenticator screen on your mobile device, tap [Yes] when prompted to confirm this is a new account.
(Screenshot: Salesforce Authenticator app displaying a prompt asking "Is this a new account?" with Yes and No buttons)

Step 4: Tap [Connect Account] in the center of the screen.
(Screenshot: Salesforce Authenticator app displaying the Connect Account button in the center of the screen)

Step 5: Enter the two-word phrase displayed on your mobile device into the browser screen from Step 2, then tap [Connect].
 
Important: Use the phrase displayed on your own mobile device — do not share this phrase with others.
(Screenshot: "Connect Salesforce Authenticator" browser screen showing a text field for the two-word phrase and a Connect button)

Step 6: The "Connect Account" confirmation screen will appear in Salesforce Authenticator. Tap [Connect]. When the account addition completion screen appears, tap [Got It].
(Screenshot: Salesforce Authenticator "Connect Account" confirmation screen with a Connect button)
(Screenshot: Account addition completion screen with a "Got It" button)

Step 7: If you see a blue message stating "Notifications Disabled," tap it to allow notifications, then tap [Next].
 
NOTE: To use Salesforce Authenticator's automatic approval feature, you also need to grant location and background access permissions. Any areas displayed in blue indicate that the permission is currently disabled — tap them to grant permission.
(Screenshot: Salesforce Authenticator permissions screen with blue "Notifications Disabled" message and a Next button)

Step 8: The "Back Up Your Account" screen will appear. Set up your backup and tap [Next].

Important:

It is strongly recommended to complete the backup setup at this step. If you change devices in the future without a backup and cannot access your old device, you will need your System Administrator to disconnect Salesforce Authenticator before you can reconnect.

(Screenshot: "Back Up Your Account" screen with backup options and a Next button)

Setup is now complete. From now on, when you log in to Salesforce, after entering your username and password, you can approve the login by tapping [Approve] from the notification in the Salesforce Authenticator app.

Migrate Salesforce Authenticator to a New Device (With Backup) :

This section applies to users who are setting up Salesforce Authenticator on a new device and can access their old Salesforce Authenticator app to retrieve or create a backup.
 
Step 1: Complete Steps 1 and 2 from the "First Time Setup" section above to reach the "Connect Salesforce Authenticator" screen in your browser.
 
Step 2: Open Salesforce Authenticator on your new device and tap [No] when asked if this is a new account.
(Screenshot: Salesforce Authenticator app on new device displaying the "Is this a new account?" prompt with Yes and No buttons)
 
Step 3: When asked if you can access your old Salesforce Authenticator, tap [Yes].
(Screenshot: Salesforce Authenticator app displaying a prompt asking if the user can access their old device, with Yes and No buttons)
Step 4: On your old mobile device's Salesforce Authenticator, create a backup. Then return to your new device, tap [Next], and restore the account backup you created.
 
NOTE: Select the restore option that corresponds to the method you used to create the backup (email address or SMS).
(Screenshot: New device Salesforce Authenticator screen showing the backup restore options with email and SMS selections)
(Screenshot: Backup restoration confirmation screen on the new device)
 
Migration is now complete. Your Salesforce Authenticator is connected on your new device.

Migrate Salesforce Authenticator to a New Device (Without Backup) :

This section applies to users who are setting up Salesforce Authenticator on a new device but cannot access their old Salesforce Authenticator app.

 

Step 1: Complete Steps 1 and 2 from the "First Time Setup" section above to reach the "Connect Salesforce Authenticator" screen in your browser.

 

Step 2: Open Salesforce Authenticator on your new device and tap [No] when asked if this is a new account.
(Screenshot: Salesforce Authenticator app on new device displaying the "Is this a new account?" prompt with Yes and No buttons)

 

Step 3: When asked if you can access your old Salesforce Authenticator, tap [No].
(Screenshot: Salesforce Authenticator app displaying a prompt asking if the user can access their old device, with Yes and No buttons — No is selected)

 

Step 4: If you had previously created a backup of Salesforce Authenticator on your old device, tap [Yes], select the backup method used (email address or SMS), and proceed with restoring your account.
 
If you did not create a backup and cannot access your old device, you will not be able to complete migration using this method — proceed to the "Requesting Admin Assistance" section below.
(Screenshot: Salesforce Authenticator screen asking if the user created a backup, with Yes and No buttons)
(Screenshot: Backup restoration screen showing email and SMS restore options)

Requesting Admin Assistance :

If you cannot access your old Salesforce Authenticator and did not create a backup, you will need your System Administrator to disconnect the currently connected Salesforce Authenticator.Once it is disconnected by your administrator, follow the steps in the "Set Up Salesforce Authenticator (First Time Setup)" section of this article to reconnect (Important: The user cannot complete this step themselves — a System Administrator must perform the disconnection before the user can proceed with reconnecting Salesforce Authenticator).

Nummer des Knowledge-Artikels

002620371

 
Laden
Salesforce Help | Article