--- schema_version: "1" id: f4729f8433d42c26255a050fa43b3daf40eed13b7993d866869ce5447a4bde62 title: What Is Multi-Factor Authentication? collection: admin version: current locale: en-us portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/basics_identity_mfa.md canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.basics_identity_mfa.htm&release=264.0.0&type=5 source_site: help.salesforce.com content_type: documentation content_hash: 79b570b57d5c0a117242feb4957ee9df3d2ec8f342a78d95066f0c3296788b7f description: Faced with rising threats like phishing attacks, credential stuffing, and account takeovers, we all want to keep our online accounts and data secure. Multi-factor authentication (MFA) is one of the easiest and most effective ways to do that because it requires multiple pieces of identity evidence each time you log in. MFA is so important, Salesforce requires it for all logins to the user interface. products: - Salesforce Platform - Cross Cloud release: "264" --- # What Is Multi-Factor Authentication? Faced with rising threats like phishing attacks, credential stuffing, and account takeovers, we all want to keep our online accounts and data secure. Multi-factor authentication (MFA) is one of the easiest and most effective ways to do that because it requires multiple pieces of identity evidence each time you log in. MFA is so important, Salesforce requires it for all logins to the user interface. ### Required Editions
Available in: both Salesforce Classic and Lightning Experience
Available in: all editions
For a quick overview of what MFA is and how it works, check out this short video. MFA confirms your identity by having you provide multiple “factors” when you log in. - The first factor is something you know — your Salesforce username and password. - After that, you’re prompted for a second factor, an identity verification method that’s in your possession. There are several types of methods to choose from, including mobile or desktop authenticator apps, built-in authenticators like Windows Hello or Touch ID, and physical security keys. By tying account access to several different types of factors, it’s harder for a cyber attacker to gain entry to your Salesforce environment. Even if your password is compromised, the odds are low that an attacker can guess or impersonate a factor that you physically possess. To log in with MFA, you must first register at least one verification method so it’s connected to your Salesforce account. The first time you log into an environment where MFA is turned on, you’re asked to do this task. Simply follow the on-screen prompts to complete the simple process. #### See Also - [Log In for the First Time](https://help.salesforce.com/s/articleView?id=xcloud.basics_intro_logging_in.htm&release=264.0.0&type=5 "Your welcome email includes your login information and a link to your company’s Salesforce org. Use what’s in the welcome email to log in for the first time.") - [Verification Methods for Multi-Factor Authentication](https://help.salesforce.com/s/articleView?id=xcloud.mfa_supported_verification_methods.htm&type=5&language=en_US) - [Register an Identity Verification Method for Salesforce Orgs](https://help.salesforce.com/s/articleView?id=xcloud.basics_identity_register_verifiers.htm&release=264.0.0&type=5 "Multi-factor authentication (MFA) is required for Salesforce logins. To access your account, you need a registered identity verification method that you provide after entering your username and password. When MFA is turned on, if you haven’t registered a method yet, you’re automatically prompted to do so at login. If you’re already logged in, you can register methods at any time. The registration process creates a connection between the chosen method and your Salesforce account. You can also use a registered verification method if you receive a device activation challenge for an unfamiliar login attempt.")