---
schema_version: "1"
id: bba139a4603d070aab498916bacf23f9a1c418c5211f1fddb00d4d9cdde3f341
title: Review New and Upcoming Security Requirements for Marketing Cloud Engagement
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/264-0-0/rn_mce_upcoming_security_requirements.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_mce_upcoming_security_requirements.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 0501b58906fb163e36de66eb522a1b71691467f31b86fa8d68dcb596a970923b
description: To protect against evolving security threats, Salesforce updates security requirements. Review the newest authentication and login requirements for Marking Cloud Engagement accounts.
products:
  - Cross Cloud
release: "264"
---
# Review New and Upcoming Security Requirements for Marketing Cloud Engagement

To protect against evolving security threats, Salesforce updates security requirements. Review the newest authentication and login requirements for Marking Cloud Engagement accounts.

**Where:** This change applies to all Marketing Cloud Engagement editions.

**When:** The enforcement dates vary per feature. [Step-Up Authentication in Marketing Cloud Engagement](https://help.salesforce.com/s/articleView?id=005389128&type=1&language=en_US) was enforced on July 30, 2026. Salesforce enforces the other requirements over time. See the linked release notes for details.

**Why:** Here are the other security requirements for Marketing Cloud Engagement accounts.

- [Prepare to Rotate Client Secrets for Installed Packages](https://help.salesforce.com/s/articleView?id=release-notes.rn_mce_client_secrets_rotate.htm&release=264.0.0&type=5 "All installed package client secrets that you haven’t rotated since March 25, 2026 expire on September 30, 2026. All client secrets generated after March 25, 2026 have a 180-day expiration period, beginning on the day they’re generated. In the days before each client secret expires, you receive email notifications and see banner notifications in Marketing Cloud Engagement.")
- [Configure Your Login Allowlist Based on Recommended IP Ranges](https://help.salesforce.com/s/articleView?id=rn_mce_security_allowlist_recommendations.htm&language=en_US)
- [Update Single Sign-On Accounts to use MFA](https://help.salesforce.com/s/articleView?id=rn_mce_security_update_sso_mfa.htm&language=en_US)
- [Protect Against Phishing by Using Platform Authentication Systems](https://help.salesforce.com/s/articleView?id=rn_mce_security_platform_authentication.htm&language=en_US)

#### See Also

- [Explore Features That Support MFA and Email Security](https://help.salesforce.com/s/articleView?id=release-notes.rn_security_enhancements_supporting_mfa_email.htm&release=264.0.0&type=5 "As security threats shift quickly, Salesforce develops features to help you meet the latest requirements. Review new features that support multi-factor authentication (MFA) and email domain verification.")
- [Review and Comply with Upcoming Security Requirements](https://help.salesforce.com/s/articleView?id=release-notes.rn_security_enhancements_upcoming.htm&release=264.0.0&type=5 "To protect against evolving cybersecurity threats, Salesforce regularly strengthens security controls. Review new requirements for access controls, email verification, and connected apps and external client apps that access Salesforce data via OAuth (Open Authorization) flows.")