--- schema_version: "1" id: d93df64ab1bc98d16a13fd32fa9d1764d24e3fa2536af4b36b60c8d8bd5ce9a3 title: Register an Identity Verification Method for Salesforce Orgs collection: admin version: current locale: en-us portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/basics_identity_register_verifiers.md canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.basics_identity_register_verifiers.htm&release=264.0.0&type=5 source_site: help.salesforce.com content_type: documentation content_hash: 7f7625a962f69dde7af6c32e264d16f5b29e2c0f656c2f48cf85200765028d47 description: Multi-factor authentication (MFA) is required for Salesforce logins. To access your account, you need a registered identity verification method that you provide after entering your username and password. When MFA is turned on, if you haven’t registered a method yet, you’re automatically prompted to do so at login. If you’re already logged in, you can register methods at any time. The registration process creates a connection between the chosen method and your Salesforce account. You can also use a registered verification method if you receive a device activation challenge for an unfamiliar login attempt. products: - Salesforce Platform - Cross Cloud release: "264" --- # Register an Identity Verification Method for Salesforce Orgs Multi-factor authentication (MFA) is required for Salesforce logins. To access your account, you need a registered identity verification method that you provide after entering your username and password. When MFA is turned on, if you haven’t registered a method yet, you’re automatically prompted to do so at login. If you’re already logged in, you can register methods at any time. The registration process creates a connection between the chosen method and your Salesforce account. You can also use a registered verification method if you receive a device activation challenge for an unfamiliar login attempt. ### Required Editions
Available in: both Salesforce Classic and Lightning Experience
Available in: all editions
- [Create a Passkey](https://help.salesforce.com/s/articleView?id=xcloud.register_built_in_authenticator.htm&release=264.0.0&type=5 "For a secure, fast, and easy login with multi-factor authentication (MFA), create a passkey, also known as a built-in authenticator. With passkeys, you have multiple ways to log in: fingerprint or facial scanners on your device, physical security keys, a device PIN or password, or password managers. Some passkeys work only on the device where you set them up. If you set up a device-bound passkey on your laptop, you can’t use it to log in from your phone. If you log in to Salesforce from multiple devices, set up your passkeys so that you can access your account anywhere.") - [Register a Security Key as an Identity Verification Method for Salesforce Orgs](https://help.salesforce.com/s/articleView?id=xcloud.security_u2f_register_security_key.htm&release=264.0.0&type=5 "Register a physical security key so you can use it to verify your identity when logging in with multi-factor authentication (MFA) or if you receive a device activation challenge. You can use security keys that support the WebAuthn (FIDO2) or Universal Second Factor (U2F) standards. The registration process sets up your security key as a personal verification by creating a connection between your Salesforce account and the key. If you don’t see this option, talk to your Salesforce admin about enabling it.") - [Register Salesforce Authenticator as an Identity Verification Method for Salesforce Orgs](https://help.salesforce.com/s/articleView?id=xcloud.salesforce_authenticator_add_account.htm&release=264.0.0&type=5 "Connect your Salesforce account to the Salesforce Authenticator app so that you can easily log in with multi-factor authentication (MFA). Then, every time you log in to Salesforce, the app sends a notification to your mobile device to verify it’s you. The process for connecting your account depends on whether you’re logged in to Salesforce when MFA is enabled.") - [Register a Third-Party Authenticator App as an Identity Verification Method for Salesforce Orgs](https://help.salesforce.com/s/articleView?id=xcloud.add_time-based_token.htm&release=264.0.0&type=5 "Register a third-party authenticator app so you can use it to verify your identity when logging in with multi-factor authentication (MFA) or if you receive a device activation challenge. Authenticator apps, such as Google Authenticator, Microsoft Authenticator, or Authy, generate verification codes that you enter in Salesforce to verify your identity. There are mobile apps, browser extensions, and desktop options such as most password managers. You can use any third-party product that generates time-based one-time password (TOTP) codes. The registration process sets up your authenticator app as a personal verification method by creating a connection between your Salesforce account and the app.") ![Tip](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-basics-264-0-0-production-enus/d8bf6981-f8ef-4f16-bfbd-c42ed32044eb/images/icon_tip.png) Tip We strongly encourage you to register two or more verification methods so you have a backup available for MFA if you forget or lose your primary method. You can register one method for each of the four method types listed in this topic. If you set up multiple methods, Salesforce logins automatically ask you for the most secure type but you can always override the prompt and select a different option. Salesforce uses this order of precedence: built-in authenticators, security keys, Salesforce Authenticator, third-party TOTP authenticator apps. - **[Create a Passkey](https://help.salesforce.com/s/articleView?id=xcloud.register_built_in_authenticator.htm&release=264.0.0&type=5)** For a secure, fast, and easy login with multi-factor authentication (MFA), create a passkey, also known as a built-in authenticator. With passkeys, you have multiple ways to log in: fingerprint or facial scanners on your device, physical security keys, a device PIN or password, or password managers. Some passkeys work only on the device where you set them up. If you set up a device-bound passkey on your laptop, you can’t use it to log in from your phone. If you log in to Salesforce from multiple devices, set up your passkeys so that you can access your account anywhere. - **[Manage Passkeys and Security Keys](https://help.salesforce.com/s/articleView?id=xcloud.mfa_passkeys_manage.htm&release=264.0.0&type=5)** Manage passkeys, including security keys, that you use to log in with multi-factor authentication (MFA). View your registered passkeys, create passkeys, and disconnect existing passkeys that you no longer use. Passkeys are also known as built-in authenticators. - **[Register a Security Key as an Identity Verification Method for Salesforce Orgs](https://help.salesforce.com/s/articleView?id=xcloud.security_u2f_register_security_key.htm&release=264.0.0&type=5)** Register a physical security key so you can use it to verify your identity when logging in with multi-factor authentication (MFA) or if you receive a device activation challenge. You can use security keys that support the WebAuthn (FIDO2) or Universal Second Factor (U2F) standards. The registration process sets up your security key as a personal verification by creating a connection between your Salesforce account and the key. If you don’t see this option, talk to your Salesforce admin about enabling it. - **[Register a Third-Party Authenticator App as an Identity Verification Method for Salesforce Orgs](https://help.salesforce.com/s/articleView?id=xcloud.add_time-based_token.htm&release=264.0.0&type=5)** Register a third-party authenticator app so you can use it to verify your identity when logging in with multi-factor authentication (MFA) or if you receive a device activation challenge. Authenticator apps, such as Google Authenticator, Microsoft Authenticator, or Authy, generate verification codes that you enter in Salesforce to verify your identity. There are mobile apps, browser extensions, and desktop options such as most password managers. You can use any third-party product that generates time-based one-time password (TOTP) codes. The registration process sets up your authenticator app as a personal verification method by creating a connection between your Salesforce account and the app.