---
schema_version: "1"
id: f6893e774e7b58c04ffa5f890c4e4d2dae4e5dfa70eb03791f5ef10e34cab8f4
title: Security Enhancements
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/262-0-0/rn_security_enhancements.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_security_enhancements.htm&release=262.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 1499c5db325be7e0a7bc0aae1cd59992ae8f3db8255c7639a71751f8e6a9aa24
description: Prepare for new and upcoming security enhancements.
products:
  - Cross Cloud
release: "262"
---
# Security Enhancements

Prepare for new and upcoming security enhancements.

- **[Review and Comply with New and Upcoming Security Requirements](https://help.salesforce.com/s/articleView?id=release-notes.rn_security_enhancements_upcoming.htm&release=262.0.0&type=5)**  
    To protect against evolving cybersecurity threats, Salesforce strengthens security controls. Salesforce requires email domain verification to send email. Starting in June 2026, Salesforce enforces other controls, including Multi-Factor Authentication (MFA) for all users, phishing-resistant MFA for Salesforce admins, and login IP address restrictions. And in Winter ’27, Salesforce retires the OAuth 2.0 username-password flow for connected apps.
- **[Avoid Email Disruption with Automatic June Updates](https://help.salesforce.com/s/articleView?id=release-notes.rn_security_email_substitution_june_update.htm&release=262.0.0&type=5)**  
    Salesforce is taking steps to help prevent email delivery disruption when Salesforce removes your temporary email-sending domain allowlist. Starting June 23, 2026, we turn on a substitute email address for unverified domains.
- **[Add a Security Contact for Incident Alerts](https://help.salesforce.com/s/articleView?id=release-notes.rn_security_add_security_contact.htm&release=262.0.0&type=5)**  
    Provide security contact information so that Salesforce can send security alerts and communications to this contact. For the security contact email address, we recommend that you use a monitored distribution list. The security contact information is now required on the Company Information page in Setup. To make sure that you continue to receive security alerts, make a plan to review these fields on a regular basis.
- **[Find Admin Security Content for the Platform in One Place](https://help.salesforce.com/s/articleView?id=release-notes.rn_security_enhancements_consolidated_help.htm&release=262.0.0&type=5)**  
    Learn about the Salesforce Platform security features available to all admins in the new Secure Your Salesforce Org tile on Salesforce Help. The curated content covers how to configure key security features and guides you to Salesforce-recommended baseline security settings.