Register for Multi-Factor Authentication (or Get a Little More Time If You Need It)

To protect your account against cyberthreats, logins now require multi-factor authentication (MFA) in addition to your username and password. To finish logging in, register a verification method that proves your identity. A Salesforce admin can temporarily disable MFA if users need more time to get ready.

Important If you’re the only Salesforce admin for your org and you can’t log in because of MFA, contact Salesforce Customer Support to regain access.

Note Not familiar with MFA? Check out this video tutorial.

Register an Identity Verification Method for MFA

Pick one of these verification methods, then follow the on-screen registration steps. Not sure which option to use and can’t log in because of it? Talk to your Salesforce admin.

Salesforce Authenticator	Built-In Authenticator	Security Key (U2F or WebAuthn)	Third-Party Authenticator
A free mobile app from Salesforce Download on the App Store or Google Play	OS-level authentication with biometrics, via services such as Windows Hello or Touch ID Must be configured on your computer or mobile device before you can register this option	A physical device such as a YubiKey or Titan Security key Plugs into your computer — no mobile device needed	Apps that generate unique one-time codes, such as Google Authenticator or Microsoft Authenticator Mobile, desktop, and browser extension apps are available
Learn More Registration Help	Learn More Registration Help	Learn More Registration Help	Learn More Registration Help

Salesforce Authenticator

Built-In Authenticator

Security Key (U2F or WebAuthn)

Third-Party Authenticator

A free mobile app from Salesforce
Download on the App Store or Google Play

OS-level authentication with biometrics, via services such as Windows Hello or Touch ID
Must be configured on your computer or mobile device before you can register this option

A physical device such as a YubiKey or Titan Security key
Plugs into your computer — no mobile device needed

Apps that generate unique one-time codes, such as Google Authenticator or Microsoft Authenticator
Mobile, desktop, and browser extension apps are available

The registration process starts differently depending on your org. You see either a list of verification methods or you start with the option to connect Salesforce Authenticator.


Not seeing the last two options in the list? Ask your Salesforce admin to add them.	Don’t want to use Salesforce Authenticator? Select the highlighted link.

Tip Registering Salesforce Authenticator? If you see six-digit codes in the app, you registered a different account at another time. For the account you’re logging into now, generate the required two-word phrase by tapping Add an Account in Salesforce Authenticator.

Not Ready for MFA Yet? Salesforce Admins Can Temporarily Disable It

If you’re a Salesforce admin and your users need more time to get ready for MFA, you can temporarily disable it for your org. From Setup, in the Quick Find box, enter Identity, and then select Identity Verification. Deselect Require multi-factor authentication (MFA) for all direct UI logins to your Salesforce org, then save your changes.

Turning off MFA means you’re no longer complying with the contractual requirement to use it. Re-enable it as soon as possible. All admins for the org receive periodic in-app warnings until MFA is turned on again. For full details about the MFA requirement, see the Salesforce Multi-Factor Authentication FAQ.