---
schema_version: "1"
id: 0bbd09413a299502178998d9098001eeaf3f916a8c37853b0381fa60a8ae2282
title: Identity Verification Is Required to Register New MFA Verification Methods
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/262-0-0/rn_security_mfa_identity_verification.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_security_mfa_identity_verification.htm&release=262.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: c7a8251ba91c77616f4ea5c1161846392b6c8bfafbdcdf89cf1587596d3f09b2
description: When multi-factor authentication (MFA) requirements are enforced in your org, users must verify their identity to register new verification methods. Users can verify their identity with another verification method that's already registered on their account. If they don't have a registered verification method, Salesforce sends a one-time verification code to their email address or phone number.
products:
  - Cross Cloud
release: "262"
---
# Identity Verification Is Required to Register New MFA Verification Methods

When multi-factor authentication (MFA) requirements are enforced in your org, users must verify their identity to register new verification methods. Users can verify their identity with another verification method that's already registered on their account. If they don't have a registered verification method, Salesforce sends a one-time verification code to their email address or phone number.

**Where:** This change applies to Lightning Experience and Salesforce Classic in all editions.

**When:** This change takes effect when new MFA requirements are enforced in your org. For detailed timelines, see these articles.

- [Prepare for MFA Enforcement for All Employee Users](https://help.salesforce.com/s/articleView?id=005321561&type=1&language=en_US)
- [Prepare for Phishing-Resistant MFA Enforcement for Privileged Users including Admins](https://help.salesforce.com/s/articleView?id=005321563&type=1&language=en_US)

**How:** With this change, the "Require identity verification during multi-factor authentication (MFA) registration" setting on the [Identity Verification page in Setup](https://help.salesforce.com/s/articleView?id=xcloud.security_auth_setup_identity_verification.htm&language=en_US) is now automatically enabled and grayed out. To change this setting, contact Salesforce Customer Support.

When a user tries to add a new verification method, they're prompted to verify their identity with the most secure method registered on their account, using this order from most secure to least:

- (1) Passkeys (Touch ID or Face ID, Windows Hello, password managers, or security keys)
- (2) Salesforce Authenticator mobile app
- (3) One-time password generator app, such as Google Authenticator

If the user doesn't have any verification methods registered, Salesforce sends a one-time code to the user's phone number (SMS) or email address. Phone number takes precedence over email address.

#### See Also

- [_Salesforce Help_: Multi-Factor Authentication for Salesforce Orgs](https://help.salesforce.com/s/articleView?id=xcloud.security_overview_2fa.htm&language=en_US)
- [_Knowledge Article_: Prepare for MFA Enforcement for All Employee Users](https://help.salesforce.com/s/articleView?id=005321561&type=1&language=en_US)
- [_Knowledge Article_: Prepare for Phishing-Resistant MFA Enforcement for Privileged Users including Admins](https://help.salesforce.com/s/articleView?id=005321563&type=1&language=en_US)