Loading
Get Started with Salesforce
Table of Contents
Select Filters

          No results
          No results
          Here are some search tips

          Check the spelling of your keywords.
          Use more general search terms.
          Select fewer filters to broaden your search.

          Search all of Salesforce Help
          Register for Multi-Factor Authentication (or Get a Little More Time If You Need It)

          Register for Multi-Factor Authentication (or Get a Little More Time If You Need It)

          To protect your account against cyberthreats, logins now require multi-factor authentication (MFA) in addition to your username and password. To finish logging in, register a verification method that proves your identity. A Salesforce admin can temporarily disable MFA if users need more time to get ready.

          Important
          Important If you’re the only Salesforce admin for your org and you can’t log in because of MFA, contact Salesforce Customer Support to regain access.
          Note
          Note Not familiar with MFA? Check out this video tutorial.

          Register an Identity Verification Method for MFA

          Pick one of these verification methods, then follow the on-screen registration steps. Not sure which option to use and can’t log in because of it? Talk to your Salesforce admin.

          Salesforce Authenticator Built-In Authenticator Security Key (U2F or WebAuthn) Third-Party Authenticator
          • OS-level authentication with biometrics, via services such as Windows Hello or Touch ID
          • Must be configured on your computer or mobile device before you can register this option
          • A physical device such as a YubiKey or Titan Security key
          • Plugs into your computer — no mobile device needed
          • Apps that generate unique one-time codes, such as Google Authenticator or Microsoft Authenticator
          • Mobile, desktop, and browser extension apps are available

          Learn More

          Registration Help

          Learn More

          Registration Help

          Learn More

          Registration Help

          Learn More

          Registration Help

          The registration process starts differently depending on your org. You see either a list of verification methods or you start with the option to connect Salesforce Authenticator.

          Screenshot of the Choose a Verification Method screen for MFA registration Connect Salesforce Authenticator screen for MFA registration with a highlight on the link for picking a different method  

          Not seeing the last two options in the list? Ask your Salesforce admin to add them.

          Don’t want to use Salesforce Authenticator? Select the highlighted link.

           
          Tip
          Tip Registering Salesforce Authenticator? If you see six-digit codes in the app, you registered a different account at another time. For the account you’re logging into now, generate the required two-word phrase by tapping Add an Account in Salesforce Authenticator.

          Not Ready for MFA Yet? Salesforce Admins Can Temporarily Disable It

          If you’re a Salesforce admin and your users need more time to get ready for MFA, you can temporarily disable it for your org. From Setup, in the Quick Find box, enter Identity, and then select Identity Verification. Deselect Require multi-factor authentication (MFA) for all direct UI logins to your Salesforce org, then save your changes.

          Turning off MFA means you’re no longer complying with the contractual requirement to use it. Re-enable it as soon as possible. All admins for the org receive periodic in-app warnings until MFA is turned on again. For full details about the MFA requirement, see the Salesforce Multi-Factor Authentication FAQ.

           
          Loading
          Salesforce Help | Article