---
schema_version: "1"
id: e5bd8a8cf08f59dad80f79434f641a3bd8932a2934c1f5d18982ffcd711f65db
title: Methods for Verifying Your Identity
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/activating_computer.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.activating_computer.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 85558c534e823f533c696bdaa0dcc602ff038025d33e78a4a32b29dc991a540f
description: To protect your user account and business data from unauthorized access, Salesforce requires multi-factor authentication (MFA) for an extra layer of security when you log in. In addition to entering your username and password, you’re also prompted to provide a verification method that helps prove your identity. You can register several types of verification methods for your account, including authenticator apps, built-in authenticators, and physical security keys. You can also use a registered verification method if you receive a device activation challenge because you’re logging in from a browser or IP address that Salesforce doesn’t recognize.
products:
  - Salesforce Platform
  - Cross Cloud
release: "264"
---
# Methods for Verifying Your Identity

To protect your user account and business data from unauthorized access, Salesforce requires multi-factor authentication (MFA) for an extra layer of security when you log in. In addition to entering your username and password, you’re also prompted to provide a verification method that helps prove your identity. You can register several types of verification methods for your account, including authenticator apps, built-in authenticators, and physical security keys. You can also use a registered verification method if you receive a device activation challenge because you’re logging in from a browser or IP address that Salesforce doesn’t recognize.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: both Salesforce Classic and Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: all editions</td></tr></tbody></table>

Salesforce supports these types of verification methods. The methods appear in order of precedence, with the most secure options listed at the top.

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small ">
      <colgroup>
        <col style="width:28.011204481792717%">
        <col style="width:71.98879551820728%">
      </colgroup>
      <thead class="slds-text-title_caps ">
        <tr class="">
          <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d16440e59">Verification Method Types</th>
          <th scope="col" class="slds-cell-wrap" style="vertical-align:top;" id="d16440e62">Description</th>
        </tr>
      </thead>
      <tbody>
        <tr class="">
          <td data-label="Verification Method Types" class="slds-cell-wrap" style="vertical-align:top;" headers="d16440e59 ">Built-In Authenticator</td>

          <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d16440e62 ">
            <p>If your computer or mobile device has a built-in authenticator such as Face ID,
              Touch ID, or Windows, you can verify your identity with a fingerprint, iris, or facial
              recognition scan.</p>
            <p>A built-in authenticator must already be enabled and set up before
              you can register it for Salesforce MFA. And keep in mind that this option is tied to
              the device you’re currently using. If you log in from other devices too, you must
              set up a different verification method for those systems.</p>
            <p style="margin-bottom:0;"><a href="https://help.salesforce.com/s/articleView?id=xcloud.mfa_supported_verification_methods_bia.htm&amp;language=en_US" target="_blank">Learn more</a> or <a href="https://help.salesforce.com/s/articleView?id=xcloud.register_built_in_authenticator.htm&amp;release=264.0.0&amp;type=5" title="For a secure, fast, and easy login with multi-factor authentication (MFA), create a passkey, also known as a built-in authenticator. With passkeys, you have multiple ways to log in: fingerprint or facial scanners on your device, physical security keys, a device PIN or password, or password managers. Some passkeys work only on the device where you set them up. If you set up a device-bound passkey on your laptop, you can’t use it to log in from your phone. If you log in to Salesforce from multiple devices, set up your passkeys so that you can access your account anywhere.">get help registering a
                built-in authenticator</a>. If this option isn’t available in your org, talk to
              your Salesforce admin.</p>
          </td>

        </tr>
        <tr class="">
          <td data-label="Verification Method Types" class="slds-cell-wrap" style="vertical-align:top;" headers="d16440e59 ">Security Key</td>

          <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d16440e62 ">
            <p>A Universal Second Factor (U2F) or WebAuthn security key, such as the YubiKey
              from Yubico or the Titan Security Key from Google, is a physical device that you plug
              into your computer to verify your identity. You can use your own security key if you
              have one, or check if your company is providing them for MFA logins.</p>
            <p style="margin-bottom:0;"><a href="https://help.salesforce.com/s/articleView?id=xcloud.mfa_supported_verification_methods_securitykey.htm&amp;language=en_US" target="_blank">Learn more</a> or <a href="https://help.salesforce.com/s/articleView?id=xcloud.security_u2f_register_security_key.htm&amp;release=264.0.0&amp;type=5" title="Register a physical security key so you can use it to verify your identity when logging in with multi-factor authentication (MFA) or if you receive a device activation challenge. You can use security keys that support the WebAuthn (FIDO2) or Universal Second Factor (U2F) standards. The registration process sets up your security key as a personal verification by creating a connection between your Salesforce account and the key. If you don’t see this option, talk to your Salesforce admin about enabling it.">get help registering a
                security key</a>. If this option isn’t available in your org, talk to your
              Salesforce admin.</p>
          </td>

        </tr>
        <tr class="">
          <td data-label="Verification Method Types" class="slds-cell-wrap" style="vertical-align:top;" headers="d16440e59 ">Salesforce Authenticator Mobile App</td>

          <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d16440e62 ">Salesforce Authenticator is a free mobile authenticator app that you can download
            from the <a href="https://itunes.apple.com/us/app/salesforce-authenticator/id782057975" target="_blank">App Store</a> or <a href="https://play.google.com/store/apps/details?id=com.salesforce.authenticator" target="_blank">Google Play</a>. This app makes it easy to verify
            your identity by sending a push notification that you can approve with a single tap.
            If your mobile device is offline, you can still log in with the one-time codes that
            the app generates. <a href="https://help.salesforce.com/s/articleView?id=xcloud.salesforce_authenticator_overview.htm&amp;release=264.0.0&amp;type=5" title="Welcome to the Salesforce Authenticator mobile app. Salesforce Authenticator is the fastest and easiest way to complete multi-factor authentication (MFA) and other types of identity verification. Verify your identity with the tap of a finger while using any Salesforce product that requires MFA. You can also use the app with other online accounts that support time-based one-time password (TOTP) authenticator apps.">Learn more</a> or <a href="https://help.salesforce.com/s/articleView?id=xcloud.salesforce_authenticator_add_account.htm&amp;release=264.0.0&amp;type=5" title="Connect your Salesforce account to the Salesforce Authenticator app so that you can easily log in with multi-factor authentication (MFA). Then, every time you log in to Salesforce, the app sends a notification to your mobile device to verify it’s you. The process for connecting your account depends on whether you’re logged in to Salesforce when MFA is enabled.">get help registering
              Salesforce Authenticator</a>.</td>

        </tr>
        <tr class="">
          <td data-label="Verification Method Types" class="slds-cell-wrap" style="vertical-align:top;" headers="d16440e59 ">Third-Party Authenticator App</td>

          <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d16440e62 ">Authenticator apps, such as Google Authenticator or Microsoft Authenticator,
            generate time-based one-time password (TOTP) codes that you enter in Salesforce to
            verify your identity. Choose from mobile apps, browser extensions, and desktop apps,
            including most password managers. You can use any third-party product that generates
            TOTP codes. <a href="https://help.salesforce.com/s/articleView?id=xcloud.mfa_supported_verification_methods_totp.htm&amp;language=en_US" target="_blank">Learn more</a> or <a href="https://help.salesforce.com/s/articleView?id=xcloud.add_time-based_token.htm&amp;release=264.0.0&amp;type=5" title="Register a third-party authenticator app so you can use it to verify your identity when logging in with multi-factor authentication (MFA) or if you receive a device activation challenge. Authenticator apps, such as Google Authenticator, Microsoft Authenticator, or Authy, generate verification codes that you enter in Salesforce to verify your identity. There are mobile apps, browser extensions, and desktop options such as most password managers. You can use any third-party product that generates time-based one-time password (TOTP) codes. The registration process sets up your authenticator app as a personal verification method by creating a connection between your Salesforce account and the app.">get help registering a third-party
              authenticator app</a>.</td>

        </tr>
        <tr class="">
          <td data-label="Verification Method Types" class="slds-cell-wrap" style="vertical-align:top;" headers="d16440e59 ">One-Time Password via SMS Text Message</td>

          <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d16440e62 ">
            <p>Available only for external users logging in to customer or partner Experience
              Cloud sites. </p>
            <p style="margin-bottom:0;">If you have a verified mobile number associated with your account,
              Salesforce sends a one-time password (OTP) code in a text message sent to your
              phone. If you don’t have a verified mobile number, you’re prompted to register one
              when you log in to Salesforce. Registering your mobile phone number verifies it and
              enables this method when you’re challenged in the future. If your mobile number
              changes, contact your Salesforce admin.</p>
          </td>

        </tr>
        <tr class="">
          <td data-label="Verification Method Types" class="slds-cell-wrap" style="vertical-align:top;" headers="d16440e59 ">One-Time Password via Email</td>

          <td data-label="Description" class="slds-cell-wrap" style="vertical-align:top;" headers="d16440e62 ">
            <p>Available only for external users logging in to customer or partner Experience
              Cloud sites. </p>
            <p style="margin-bottom:0;">Salesforce sends an OTP code in an email to the address associated
              with your account. The code expires after 24 hours.</p>
          </td>

        </tr>
      </tbody>
    </table>

Consider these tips as you decide which methods to use.

- You can self-register verification methods at any time. See [Register an Identity Verification Method for Salesforce Orgs](https://help.salesforce.com/s/articleView?id=xcloud.basics_identity_register_verifiers.htm&release=264.0.0&type=5 "Multi-factor authentication (MFA) is required for Salesforce logins. To access your account, you need a registered identity verification method that you provide after entering your username and password. When MFA is turned on, if you haven’t registered a method yet, you’re automatically prompted to do so at login. If you’re already logged in, you can register methods at any time. The registration process creates a connection between the chosen method and your Salesforce account. You can also use a registered verification method if you receive a device activation challenge for an unfamiliar login attempt.").
- We strongly encourage you to register two or more verification methods so you have a backup available for MFA if you forget or lose your primary method. You can register one method for each of the four method types listed at the top of the table in this topic.
- If you set up multiple methods, Salesforce logins automatically ask you for the most secure type but you can always override the prompt and select a different option.
- You can register the same verification method with multiple Salesforce accounts, as well as other service providers.

## Managing Identity Verification Prompts

- Multi-Factor Authentication (MFA) Logins: MFA is turned on by default for logins to the user interface. You must provide a verification method each time you log in.
- Device Activation: See [Device Activation](https://help.salesforce.com/s/articleView?id=xcloud.security_overview_identity_verification.htm&type=5&language=en_US) for more information on managing these prompts.

#### See Also

- [What Is Multi-Factor Authentication?](https://help.salesforce.com/s/articleView?id=xcloud.basics_identity_mfa.htm&release=264.0.0&type=5 "Faced with rising threats like phishing attacks, credential stuffing, and account takeovers, we all want to keep our online accounts and data secure. Multi-factor authentication (MFA) is one of the easiest and most effective ways to do that because it requires multiple pieces of identity evidence each time you log in. MFA is so important, Salesforce requires it for all logins to the user interface.")
- [Device Activation](https://help.salesforce.com/s/articleView?id=xcloud.security_overview_identity_verification.htm&type=5&language=en_US)