Loading
Salesforce now sends email only from verified domains. Read More
Get Started with Salesforce
Table of Contents
Filter by (0)Add
Select Filters

          No results
          No results
          Here are some search tips

          Check the spelling of your keywords.
          Use more general search terms.
          Select fewer filters to broaden your search.

            Search all of Salesforce Help
            Search all of Salesforce Help
            Use Salesforce Authenticator for Multi-Factor Authentication

            You are here:

            1. Salesforce Help
            2. Docs
            3. Get Started with Salesforce

            Use Salesforce Authenticator for Multi-Factor Authentication

            We all want to keep our online accounts and data secure. Salesforce wants that too, which is why multi-factor authentication (MFA) is required for all logins to the user interface. MFA adds an extra layer of security by requiring you to enter two or more pieces of evidence (or factors) about your identity when you log in. The first factor is something you know, like your username and password combination. The second is a verification method that you have in your possession, like the Salesforce Authenticator mobile app. With MFA, even if hackers steal your password, they can’t log in because they don't have your mobile device with Salesforce Authenticator installed on it.

            Required Editions

            Available in: both Salesforce Classic and Lightning Experience
            Available in: all editions

            Many mobile authenticator apps generate verification codes that expire after a certain amount of time. When you log in to an online account that requires MFA, you enter the code along with your username and password. Salesforce Authenticator makes MFA even easier with more options for verification. You can verify your identity by entering a code or by simply responding to a notification. You can even set up a trusted location and verify your identity just by being there.

            When someone tries to log in or access restricted online data in your Salesforce account, Salesforce sends a notification to your mobile device. You open the Salesforce Authenticator app to see details of the online activity. After you check the details, you can tap Approve to verify that the activity belongs to you. If you don’t recognize the activity, you tap Deny to block it. You can also flag the blocked activity for your Salesforce admin.

            Before you can use Salesforce Authenticator for MFA logins, you must register the app to connect it to your Salesforce account. You can do this step anytime from your personal settings.

            Salesforce Authenticator Isn't Only for Your Salesforce Account

            You can also use the app to log in to your other online accounts. For example, use Salesforce Authenticator to add an extra layer of security when you log in to Facebook. When you connect Salesforce Authenticator to accounts other than Salesforce, you verify your identity with verification codes instead of notifications or location-based verification. You can use Salesforce Authenticator with any service that supports MFA with time-based one-time passwords (TOTPs).

            See Also

             
            Loading
            Salesforce Help | Article