---
schema_version: "1"
id: cfcae383427b6eaf75a645a7a12c6e026383a1ddc9898356041dfb1cb6ee0c1f
title: Explore Features That Support MFA and Email Security
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/release-notes/264-0-0/rn_security_enhancements_supporting_mfa_email.md
canonical_url: https://help.salesforce.com/s/articleView?id=release-notes.rn_security_enhancements_supporting_mfa_email.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 3d07f83705c7d13f50df03022209cad460dce13e60287959e04e90bb14e584d7
description: As security threats shift quickly, Salesforce develops features to help you meet the latest requirements. Review new features that support multi-factor authentication (MFA) and email domain verification.
products:
  - Cross Cloud
release: "264"
---
# Explore Features That Support MFA and Email Security

As security threats shift quickly, Salesforce develops features to help you meet the latest requirements. Review new features that support multi-factor authentication (MFA) and email domain verification.

**Where:** This change applies to Lightning Experience, Salesforce Classic, and all versions of the Salesforce mobile app. Review each linked release note for scope and edition details.

**Why:** Added late in Summer ’26, these new features and updates help you adopt MFA.

- [Manage Passkeys and Security Keys With Ease](https://help.salesforce.com/s/articleView?id=release-notes.rn_security_passkeys_page.htm&release=262&type=5&language=en_US)
- [Passkey-First MFA Registration and Improved Passkey Experience](https://help.salesforce.com/s/articleView?id=release-notes.rn_security_passkey_registration.htm&release=262&type=5&language=en_US)
- [Usability Improvements for MFA Registration Pages](https://help.salesforce.com/s/articleView?id=release-notes.rn_security_mfa_registration.htm&release=262&type=5&language=en_US)
- [Enable Native Browser Authentication for iOS Before Passkey Enforcement](https://help.salesforce.com/s/articleView?id=release-notes.rn_security_adv_auth_passkey_enforcement.htm&release=262&type=5&language=en_US)
- [View Phishing-Resistant, Standard, and Weak MFA Methods in the SAML Assertion Validator](https://help.salesforce.com/s/articleView?id=release-notes.rn_security_saml_validator_enhancement.htm&release=262&type=5&language=en_US)
- [View Authentication Context Class Reference (ACR) Values in the Login History and Login Events](https://help.salesforce.com/s/articleView?id=release-notes.rn_security_acr_values.htm&release=262&type=5&language=en_US)

Added in late Summer ’26 or in Winter ’27, these new features help you verify your email-sending domains and manage email verification securely.

- [Track Email Address Verification Across User Domains](https://help.salesforce.com/s/articleView?id=release-notes.rn_sales_email_user_domains.htm&release=264.0.0&type=5 "Get a list of the email domains used in your active users’ email addresses and return email addresses. The User Email Domains page in Setup also includes verified and unverified address counts for each domain.")
- [Set the From Address for Email Sent for Users with Unverified Domains](https://help.salesforce.com/s/articleView?id=release-notes.rn_sales_email_auth_substitute_owea.htm&release=264.0.0&type=5 "Select an organization-wide email address to use as the From address when Salesforce sends email for users with an unverified email domain. With this option, outgoing email uses a From address that reflects your company’s brand.")
- [Send Site Emails from a Verified Address with Email Domain Substitution](https://help.salesforce.com/s/articleView?id=release-notes.rn_experiences_domain_substitution.htm&release=264.0.0&type=5 "Specify the From address that each Experience Cloud site uses to send email on behalf of a user with an unverified email domain. If your org has more than one site or brand, you can match each site's outgoing email to its own branding, instead of using a single org-wide address. Substitution is off by default, and you turn it on per site, so you decide where it applies.")
- [Import Authorized Email Domains into a Sandbox](https://help.salesforce.com/s/articleView?id=release-notes.rn_sales_email_auth_domain_copy.htm&release=264.0.0&type=5 "Simplify sandbox setup by skipping an update to DNS. Specify the authorized email domains in production to copy to sandboxes, then import them all into a sandbox with one click.")
- [Specify Which Email Domains Require Address Verification](https://help.salesforce.com/s/articleView?id=release-notes.rn_sales_email_set_verification_requirements.htm&release=264.0.0&type=5 "If a trusted integration or admin manages your users’ email addresses in Salesforce, specify which domains require email address verification. By default, this user-level verification is always required to send email from Salesforce. For each authorized email domain, you can require email address verification only when users change their email address, or disable address verification entirely. Previously, you contacted Salesforce Customer Support to disable email address verification.")

#### See Also

- [Review and Comply with Upcoming Security Requirements](https://help.salesforce.com/s/articleView?id=release-notes.rn_security_enhancements_upcoming.htm&release=264.0.0&type=5 "To protect against evolving cybersecurity threats, Salesforce regularly strengthens security controls. Review new requirements for access controls, email verification, and connected apps and external client apps that access Salesforce data via OAuth (Open Authorization) flows.")
- [Review New and Upcoming Security Requirements for Marketing Cloud Engagement](https://help.salesforce.com/s/articleView?id=release-notes.rn_mce_upcoming_security_requirements.htm&release=264.0.0&type=5 "To protect against evolving security threats, Salesforce updates security requirements. Review the newest authentication and login requirements for Marking Cloud Engagement accounts.")