---
schema_version: "1"
id: 2d3c804f3b571527fe5b9cdd97f2dd1682664be7ea94d0ba863289221b8d39a5
title: Security Enhancements
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/264-0-0/rn_security_enhancements.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_security_enhancements.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: c27c9ab0a2adfe003851e8e91fdf04d268446491735888028a7aa645b7220a2b
description: Prepare for new and upcoming security enhancements, and review new features that support multi-factor authentication and email domain verification.
products:
  - Cross Cloud
release: "264"
---
# Security Enhancements

Prepare for new and upcoming security enhancements, and review new features that support multi-factor authentication and email domain verification.

- **[Review and Comply with Upcoming Security Requirements](https://help.salesforce.com/s/articleView?id=release-notes.rn_security_enhancements_upcoming.htm&release=264.0.0&type=5)**  
    To protect against evolving cybersecurity threats, Salesforce regularly strengthens security controls. Review new requirements for access controls, email verification, and connected apps and external client apps that access Salesforce data via OAuth (Open Authorization) flows.
- **[Explore Features That Support MFA and Email Security](https://help.salesforce.com/s/articleView?id=release-notes.rn_security_enhancements_supporting_mfa_email.htm&release=264.0.0&type=5)**  
    As security threats shift quickly, Salesforce develops features to help you meet the latest requirements. Review new features that support multi-factor authentication (MFA) and email domain verification.
- **[Security Enhancements May Require Users to Reset Passwords](https://help.salesforce.com/s/articleView?id=release-notes.rn_security_users_reset_passwords.htm&release=264.0.0&type=5)**  
    Because the security of your data is our number one priority, Salesforce is enhancing login security. If we detect a security-related issue with a user’s login information, such as credential stuffing, we revoke all of the affected user’s active sessions and refresh tokens and initiate a forced password reset. In addition, the user receives an automated email with instructions to reset their password.
- **[Security Enhancements May Require API Reauthentication](https://help.salesforce.com/s/articleView?id=release-notes.rn_security_enhancements_require_api_reauthentication.htm&release=264.0.0&type=5)**  
    Because the security of your data is our number-one priority, Salesforce is further enhancing the security of our APIs. If Salesforce detects suspicious API data-access behavior, we trigger automated actions in order to protect the account. In most cases, these actions include terminating user sessions and notifying the org admins via email. In more critical instances, when we detect extremely unusual behavior, these actions include freezing the user, revoking all access granted to them, and notifying the org admins via email. To resume after session termination, the user must log back in. To unfreeze a user, contact your Salesforce admin.