---
schema_version: "1"
id: 706cb0b4ffd9e213f887ad47392db36c342b04a515e0aa67f09aed744a788d1e
title: Use 2FA on All Privileged Accounts
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/cc/264-0-0/b2c_use_2fa_on_all_privileged_accounts.md
canonical_url: https://help.salesforce.com/s/articleView?id=cc.b2c_use_2fa_on_all_privileged_accounts.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: a14df1fd43fd622dbd8282ea05abef0c17c91e6c34e2dfece7465372c31c6346
description: Two-factor authentication (2FA) is an extra layer of protection beyond a single password for B2C Commerce accounts. The extra protection can be knowledge (something you know), possession (something you have), or biometrics (something you are). Using a second authentication factor, such as a mobile phone (something you have), provides additional protection against common security threats such as account takeover, fraud, data loss, malicious code, and phishing attacks.
products:
  - Commerce
  - B2C Commerce
release: "264"
---
# Use 2FA on All Privileged Accounts

Two-factor authentication (2FA) is an extra layer of protection beyond a single password for B2C Commerce accounts. The extra protection can be knowledge (something you know), possession (something you have), or biometrics (something you are). Using a second authentication factor, such as a mobile phone (something you have), provides additional protection against common security threats such as account takeover, fraud, data loss, malicious code, and phishing attacks.

By using the Salesforce Authenticator app, Account Manager uses the possession metric as the secondary form of authentication. Push notifications and verification codes for 2FA are supported.