Register an Identity Verification Method for Salesforce Orgs

Multi-factor authentication (MFA) is required for Salesforce logins. To access your account, you need a registered identity verification method that you provide after entering your username and password. When MFA is turned on, if you haven’t registered a method yet, you’re automatically prompted to do so at login. If you’re already logged in, you can register methods at any time. The registration process creates a connection between the chosen method and your Salesforce account. You can also use a registered verification method if you receive a device activation challenge for an unfamiliar login attempt.

Required Editions

Available in: both Salesforce Classic and Lightning Experience

Available in: all editions

• Register a Built-In Authenticator as an Identity Verification Method for Salesforce Orgs

• Register a Security Key as an Identity Verification Method for Salesforce Orgs

• Register Salesforce Authenticator as an Identity Verification Method for Salesforce Orgs

• Register a Third-Party Authenticator App as an Identity Verification Method for Salesforce Orgs

Tip

We strongly encourage you to register two or more verification methods so you have a backup available for MFA if you forget or lose your primary method. You can register one method for each of the four method types listed in this topic.

If you set up multiple methods, Salesforce logins automatically ask you for the most secure type but you can always override the prompt and select a different option. Salesforce uses this order of precedence: built-in authenticators, security keys, Salesforce Authenticator, third-party TOTP authenticator apps.