---
schema_version: "1"
id: b9a0e547d36adc5c5f92662ec1f8882d4b28b04c7eddc25a198d53679aa2d6f8
title: Disconnect Salesforce Authenticator from a User’s Account (Salesforce Orgs)
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/xcloud/264-0-0/disconnect_salesforce_authenticator_v2_or_later.md
canonical_url: https://help.salesforce.com/s/articleView?id=xcloud.disconnect_salesforce_authenticator_v2_or_later.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: c17dd604c5544cc3179b5b54b37bf12eb9f59a575432608ed8719fad6b644850
description: Only one Salesforce Authenticator mobile app can be connected to a user’s account at a time. If a user loses or replaces the mobile device where Salesforce Authenticator was installed, you can disconnect the app from their account. If a user’s app stops working, reset it by disconnecting the app; then ask the user to restore the app’s connection to their account by re-registering it. It’s also a good security practice to disconnect all of a user’s verification methods if they leave your company.
products:
  - Security
release: "264"
---
# Disconnect Salesforce Authenticator from a User’s Account (Salesforce Orgs)

Only one Salesforce Authenticator mobile app can be connected to a user’s account at a time. If a user loses or replaces the mobile device where Salesforce Authenticator was installed, you can disconnect the app from their account. If a user’s app stops working, reset it by disconnecting the app; then ask the user to restore the app’s connection to their account by re-registering it. It’s also a good security practice to disconnect all of a user’s verification methods if they leave your company.

### Required Editions

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small edition"><colgroup><col></colgroup><tbody><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: both Salesforce Classic and Lightning Experience</td></tr><tr class=""><td class="slds-cell-wrap" style="vertical-align:top;">Available in: all editions</td></tr></tbody></table>

![Important](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-security-264-0-0-production-enus/8cecd769-ab2d-4e07-addf-c4f2927925e1/images/icon_important.png)

Important

Salesforce enforces MFA requirements in the summer of 2026. See these articles for more information and detailed rollout timelines.

- [Prepare for MFA Enforcement for All Employee Users](https://help.salesforce.com/s/articleView?id=005321561&type=1&language=en_US).
- [Prepare for Phishing-Resistant MFA Enforcement for Privileged Users including Admins](https://help.salesforce.com/s/articleView?id=005321563&type=1&language=en_US).

<table class="slds-table slds-table_bordered slds-max-medium-table_stacked slds-m-bottom_small permission">
        <colgroup>
          <col style="width:50%">
          <col style="width:50%">
        </colgroup>
        <thead class="slds-text-title_caps ">
          <tr class="">
            <th scope="colgroup" class="slds-cell-wrap" colspan="2" style="text-align:center;vertical-align:top;" id="d74558e79">User
              Permissions Needed</th>
          </tr>
        </thead>
        <tbody>
          <tr class="">
            <td data-label="User Permissions Needed" class="slds-cell-wrap" style="vertical-align:top;" headers="d74558e79 ">To disconnect a user’s Salesforce Authenticator app:</td>

            <td class="slds-cell-wrap" style="vertical-align:top;" headers="d74558e79 ">Manage Multi-Factor Authentication in User Interface or the
              System Administrator profile</td>

          </tr>
        </tbody>
      </table>

![Tip](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-security-264-0-0-production-enus/8cecd769-ab2d-4e07-addf-c4f2927925e1/images/icon_tip.png)

Tip Instead of completing this task manually, get help from Setup with Agentforce. For example, tell the Setup agent, “I want to disconnect Salesforce Authenticator from Jason Beck.” For more information, see [Identity Management in Setup with Agentforce](https://help.salesforce.com/s/articleView?id=xcloud.setup_agentforce_identity.htm&language=en_US).

![Note](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-security-264-0-0-production-enus/8cecd769-ab2d-4e07-addf-c4f2927925e1/images/icon_note.png)

Note If a user is able to access their account, they can disconnect Salesforce Authenticator themselves. Direct them to [Remove an Account from Salesforce Authenticator](https://help.salesforce.com/articleView?id=xcloud.salesforce_authenticator_remove_account.htm&type=5&language=en_US) for guidance.

1. From [Setup](https://help.salesforce.com/s/articleView?id=xcloud.basics_nav_setup.htm&type=5&language=en_US), use the Quick Find box to find and select **Users**.
2. Click on the user’s name.
    
    Don't click Edit next to the user's name. Make sure that you click directly on their name. How the name displays depends on your list view settings, but you can click on any name field that identifies the user, such as Full Name, First Name, or Last Name.
    
    ![Users page list view with user's Full Name highlighted.](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-security-264-0-0-production-enus/8cecd769-ab2d-4e07-addf-c4f2927925e1/security/images/mfa/userlistview.png)
3. On the user’s detail page, next to the App Registration: Salesforce Authenticator field, select **Disconnect**.
    
    ![User Detail page with setting to disconnect Salesforce Authenticator highlighted.](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-xcloud-security-264-0-0-production-enus/8cecd769-ab2d-4e07-addf-c4f2927925e1/security/images/mfa/sfa_disconnect.png)
    
    If you use Essentials edition and you don't see the option to disconnect Salesforce Authenticator, switch to Salesforce Classic.

After disconnecting Salesforce Authenticator, guide the user to re-register it. If the user is moving to a replacement mobile device, they must install a new version of the app first. Refer them to [Register Salesforce Authenticator as an Identity Verification Method](https://help.salesforce.com/s/articleView?id=xcloud.salesforce_authenticator_add_account.htm&type=5&language=en_US) for guidance. Admins can’t register verification methods for users.

#### See Also

- [Back Up Your Connected Accounts in the Salesforce Authenticator Mobile App](https://help.salesforce.com/s/articleView?id=xcloud.salesforce_authenticator_backup.htm&type=5&language=en_US)
- [Restore Connected Accounts in the Salesforce Authenticator Mobile App](https://help.salesforce.com/s/articleView?id=xcloud.salesforce_authenticator_restore_from_backup.htm&type=5&language=en_US)
- [Salesforce Authenticator](https://help.salesforce.com/s/articleView?id=xcloud.salesforce_authenticator_overview.htm&type=5&language=en_US)
- [Disconnect Identity Verification Methods that are Lost, Replaced, or Not Working (Salesforce Orgs)](https://help.salesforce.com/s/articleView?id=xcloud.security_disconnect_verification_methods.htm&release=264.0.0&type=5 "When addressing multi-factor authentication (MFA) access issues, there are situations where a Salesforce admin must disconnect a user’s current verification method from their Salesforce account. This step is necessary if a user has lost their method, or has acquired a replacement method that they want to use instead of their current one. If a user’s method stops working, disconnecting it allows the user to re-register the method and restore its connection to their account. It’s also a good practice to disconnect all of a user’s verification methods if they leave your company.")