Multi-Factor Authentication

If enabled at organization level, all users associated with the organization must enable Multi-factor Authentication (MFA). If disabled, users can choose whether or not to enable MFA for their sign-in. By default, MFA is disabled.

Multi-factor authentication (MFA) adds another layer of security to your account. If enabled, instead of relying only on a username and password, MFA uses a trusted device to generate a secure digital identifer used to confirm your identity.

If signing in with Google or GitHub, set MFA for those accounts and not for your Cloud account.

Enable Multi-Factor Authentication

If you have not set a password, you must do this before you can enable MFA. To set a password, complete the following steps:

Select Account from the side navigation bar
Select Password from the Account options

The Account Settings screen displays.
Select the RESET button

An email is sent to the registered email address.
Select the RESET YOUR PASSWORD link provided in the email

The Cloud Reset Password screen displays.
Enter the password you want to use in the New Password text box
Enter the same password in the Confirm Password text box
Select the Reset Password button

You must log back in to Cloud using this password before you can continue.

To enable MFA, complete the following steps:

Install an authenticator app, such as Google Authenticator, on your device
Sign into the Cloud console
Select Account from the side navigation bar
Select Ogranization from the Account options

The Organization screen displays.
Select the Enable MFA toggle
Open the authenticator app on your device, and scan the QR code that is displayed in the Cloud console
Enter the six-digit verification code provided by the authenticator app in the Cloud console
To enforce the use of MFA for all organization users, select the Enforce for entire team toggle

You and your organization users must now enter a username and password to sign in, and then provide the verification code using the authenticator app.

Change Authenticator Device

Verification codes are specific to a particular device and cannot be transferred. If you use a different device, you cannot use the codes even if they are generated from the same authentication app.

To change the device used by your authentication app, complete the following steps:

Disable MFA on your old device
Enable MFA on your new device

You can now use your authenticator app on your new device.

Disable Multi-Factor Authentication

If you’ve enabled MFA, you can disable it at any time to allow you and your organization users to sign in without an extra authentication step.

To disable MFA for all users associated with your organization, complete the following steps:

Sign into the Cloud console
Select Account from the side navigation bar
Select Organization from the Account options
Deselect the Enable MFA toggle

A confirmation email is sent to the registered email address to confirm that MFA has been disabled.