---
schema_version: "1"
id: 585af8dbea98730233931f19c95c6828406bd4e56b8c2ca41179d1d6dec7593c
title: Stay Informed About MFA Changes with an In-App Reminder
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/260-0-0/rn_security_mfa_banner.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_security_mfa_banner.htm&release=260&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: f4fc9e98ae2c8d3f845cef14464e9ac1afd251d4e4277b8681eaf7ee7f47d5f5
description: To help you and your users prepare for upcoming multi-factor authentication (MFA) security requirements, Salesforce added an in-app reminder. If your org isn’t compliant with new MFA requirements, all users see a banner that alerts them about the upcoming changes.
products:
  - Cross Cloud Packages Solutions
release: "260"
---
# Stay Informed About MFA Changes with an In-App Reminder

To help you and your users prepare for upcoming multi-factor authentication (MFA) security requirements, Salesforce added an in-app reminder. If your org isn’t compliant with new MFA requirements, all users see a banner that alerts them about the upcoming changes.

![New in-app banner to alert users about upcoming security changes](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-salesforce_release_notes-260-0-0-production-enus/ba62a63b-6cd1-440e-8d24-e867afab0363/salesforce_release_notes/images/security/security_in_app_reminder.png)

**Where:** This change is available in Lightning Experience in all editions.

**When:** The in-app reminder is available on a rolling basis starting in May 2026. Salesforce enforces MFA security controls starting in June 2026.

**How:** The banner appears if your org meets any of these criteria:

- Single sign-on (SSO) is configured.
- On the Identity Verification page in Setup, the Require multi-factor authentication (MFA) for all direct UI logins to your Salesforce org setting is disabled.
- Users have the Waive Multi-Factor Authentication for Exempt Users permission.
- Phishing-resistant MFA methods (security keys and built-in authenticators) aren’t enabled as available verification methods.

The banner is visible to all users on every page that they access in Salesforce. Users can’t dismiss the banner.

#### See Also

- [Review and Comply with New and Upcoming Security Requirements](https://help.salesforce.com/s/articleView?id=release-notes.rn_security_enhancements_upcoming.htm&language=en_US)