Loading
Secure Your Salesforce Org
Determine When Experience Cloud Users See a Prompt to Create a Passkey

You are here:

  1. Salesforce Help
  2. Docs
  3. Secure Your Salesforce Org

Determine When Experience Cloud Users See a Prompt to Create a Passkey

Salesforce doesn’t require multi-factor authentication (MFA) for external Experience Cloud users, but Salesforce requires MFA for all internal employees who use an internal license. When internal users log in to Experience Cloud sites, they see prompts to create a passkey.

Required Editions

Available in: both Salesforce Classic and Lightning Experience
Available in: Enterprise, Performance, Unlimited, and Developer Editions
User Permissions Needed
To view user licenses: View Setup and Configuration

Salesforce doesn’t require MFA for external Experience Cloud users who have one of these licenses.

Starting in August 2026, external Experience Cloud users, such as customers and partners, no longer see the Create a Passkey page when they access Experience Cloud sites. This fix is available on a rolling basis.

Note
Note If passwordless login with passkeys is enabled for the org, external users can still see an unexpected passkey prompt. Turn off the Allow passwordless login with passkeys setting on the Identity Verification page in Setup.

If an internal employee logs in to an Experience Cloud site, Salesforce still requires MFA. Internal users have one of these licenses.

To identify whether a user is internal or external, review the user’s license.

  1. From Setup, in the Quick Find box, find and select Users.
  2. Click the user’s name, and then review the user’s license.

If the user has an internal license and is an internal employee, Salesforce requires MFA, so the prompt is expected.

See Also

 
Laddar
Salesforce Help | Article