Verify Your Identity

Use identity verification tools to secure and protect your data from unauthorized access.

• What Is Multi-Factor Authentication?
  Faced with rising threats like phishing attacks, credential stuffing, and account takeovers, we all want to keep our online accounts and data secure. Multi-factor authentication (MFA) is one of the easiest and most effective ways to do that because it requires multiple pieces of identity evidence each time you log in. MFA is so important, Salesforce requires it for all logins to the user interface.
• Methods for Verifying Your Identity
  To protect your user account and business data from unauthorized access, Salesforce requires multi-factor authentication (MFA) for an extra layer of security when you log in. In addition to entering your username and password, you’re also prompted to provide a verification method that helps prove your identity. You can register several types of verification methods for your account, including authenticator apps, built-in authenticators, and physical security keys. You can also use a registered verification method if you receive a device activation challenge because you’re logging in from a browser or IP address that Salesforce doesn’t recognize.
• Salesforce Authenticator
  Welcome to the Salesforce Authenticator mobile app. Salesforce Authenticator is the fastest and easiest way to complete multi-factor authentication (MFA) and other types of identity verification. Verify your identity with the tap of a finger while using any Salesforce product that requires MFA. You can also use the app with other online accounts that support time-based one-time password (TOTP) authenticator apps.
• Register an Identity Verification Method for Salesforce Orgs
  Multi-factor authentication (MFA) is required for Salesforce logins. To access your account, you need a registered identity verification method that you provide after entering your username and password. When MFA is turned on, if you haven’t registered a method yet, you’re automatically prompted to do so at login. If you’re already logged in, you can register methods at any time. The registration process creates a connection between the chosen method and your Salesforce account. You can also use a registered verification method if you receive a device activation challenge for an unfamiliar login attempt.
• Verify Your Identity for Your Salesforce Org with a Temporary Code
  If you don’t have access to the verification method that you usually use for multi-factor authentication (MFA), ask your Salesforce admin to give you a temporary verification code. The code is valid for 1 to 24 hours. Your admin sets the expiration time, but you can expire the code early if you no longer need it.
• Recover Access if Your Verification Method Is Replaced, Gets Lost, or Stops Working (Salesforce Orgs)
  There are situations that can affect your identity verification method so you’re not able to use it for multi-factor authentication (MFA) logins to your Salesforce account.
• Troubleshoot Login Issues
  Can’t log in? Forgot your username or password, or you’re locked out from too many login attempts? To resolve login problems, try these solutions.