Faced with rising threats like phishing attacks, credential stuffing, and account
takeovers, we all want to keep our online accounts and data secure. Multi-factor authentication
(MFA) is one of the easiest and most effective ways to do that because it requires multiple
pieces of identity evidence each time you log in. MFA is so important, Salesforce requires it
for all logins to the user interface.
Required Editions
| Available in: both Salesforce Classic
and Lightning Experience |
| Available in: all editions |
For a quick overview of what MFA is and how it works, check out this short video.
MFA confirms your identity by having you provide multiple “factors” when you log in.
- The first factor is something you know — your Salesforce username and password.
- After that, you’re prompted for a second factor, an identity verification method that’s in
your possession. There are several types of methods to choose from, including mobile or
desktop authenticator apps, built-in authenticators like Windows Hello or Touch ID, and
physical security keys.
By tying account access to several different types of factors, it’s harder for a cyber
attacker to gain entry to your Salesforce environment. Even if your password is compromised,
the odds are low that an attacker can guess or impersonate a factor that you physically
possess.
To log in with MFA, you must first register at least one verification method so it’s
connected to your Salesforce account. The first time you log into an environment where MFA is
turned on, you’re asked to do this task. Simply follow the on-screen prompts to complete the
simple process.
