Configure MFA
Multi-factor authentication (MFA) adds an additional layer of security to your organization. When MFA is enabled, your users will have to verify their identity not only with their password, but also with a second factor. The second factor could be an authenticator app like Zoho OneAuth, a hardware security key (YubiKey), or an SMS-based OTP.
When MFA is enabled for a user, they will not be able to sign in without setting up their preferred authentication mode and verifying themself. You can configure the list of MFA modes your users can choose from.
In the web application:
- Sign in to Zoho One , then click Directory in the left menu.
- Go to Security , click Security Policies , then click on the policy you want to configure.
- Go to Multi-factor Authentication , then click Setup .
- Select the authentication modes that you want your users to choose from. The available authentication modes are:
OneAuth Users will have to sign in using OneAuth. If Enforce Face ID/Touch ID is enabled, users will need to configure their biometrics in OneAuth to sign in. If Allow Passwordless Sign-in is enabled, users can sign in through push notifications, time-based OTPs generated in OneAuth, or by scanning the QR code. OTP authenticator Users will have to sign in using an authenticator app. A time-based OTP (TOTP) will be generated, which needs to be entered when signing in. OneAuth provides this option for your Zoho account as well as third-party accounts. YubiKey Users will have to connect their YubiKey hardware authenticator to the device they're trying to sign in from, and verify themselves.
-
Set MFA Lifetime and enable backup recovery codes if needed. MFA Lifetime refers to the duration for which users will not be enforced to use MFA after signing in from a trusted browser.
- Click Update Policy.
To remove an MFA policy:
- Sign in to Zoho One, then click Admin Panel in the left menu.
- Go to Security , then click Security Policies.
- Click on the policy for which you want to remove MFA.
- Go to Multi-factor Authentication , scroll down and click Remove MFA.
- Enter your password, then click Yes, Remove.
Policy priority changes when a policy is removed. If an MFA policy is removed, the next policy having the top priority will be applied to the user. If there is only one remaining policy, then the default policy will hold good for the user. 
Access your files securely from anywhere
Zoho CRM Training Programs
Learn how to use the best tools for sales force automation and better customer engagement from Zoho's implementation specialists.
Zoho DataPrep Personalized Demo
If you'd like a personalized walk-through of our data preparation tool, please request a demo and we'll be happy to show you how to get the best out of Zoho DataPrep.
- Zoho Workerly Home
- Forums
- Connect With Us:
- Zoho Recruit Home
- Forums
- Connect With Us:
Centralize Knowledge. Transform Learning.
All-in-one knowledge management and training platform for your employees and customers.
New to Zoho Writer?
Create. Review. Publish.
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho CRM Plus?
Deliver unforgettable customer experiences
New to Zoho Marketing Plus?
Everything you need to run your marketing
New to Zoho Marketing Plus?
Everything you need to run your marketing
You are currently viewing the help pages of Qntrl’s earlier version. Click here to view our latest version—Qntrl 3.0's help articles.
New to Zoho Survey?
Zoho Sheet Resources
Zoho Forms Resources
New to Zoho Sign?
Zoho Sign Resources
Sign, Paperless!
New to Zoho TeamInbox?
Zoho TeamInbox Resources
New to Zoho ZeptoMail?
Design. Discuss. Deliver.
New to Zoho Workerly?
New to Zoho Recruit?
New to Zoho CRM?
New to Zoho Projects?
New to Zoho Sprints?
New to Zoho Assist?
New to Bigin?
Related Articles
Configure MFA
Multi-factor authentication (MFA) adds an additional layer of security to your organization. When MFA is enabled, your users will have to verify their identity not only with their password, but also with a second factor. The second factor could be an ...Configure password policy
Passwords are the most commonly used authentication factor. Many users reuse the same, insecure password for all their online accounts, compromising their organization's security. To protect yourself from this common pitfall, make it mandatory for ...Add security policy
Prerequisites Organization Owner Organization Admin iOS Open the Zoho One Admin app on your mobile device. Then tap in the bottom-right corner, then tap Security Policies. Tap Add, then enter the Policy Name. Under Enforced Groups, choose the groups ...Delete a security policy
When a security policy is deleted, the priorities of the remaining policies will be reordered and applied accordingly. Learn more about policy priority. Prerequisites Organization Owner Organization Admin iOS Open the Zoho One Admin app on your ...Apply an existing security policy to new groups
When applying a policy to a new group, remember to take the policies already applied to the group into account. When a group has multiple security policies, they will be applied based on the policy priority. Prerequisites Organization Owner ...
New to Zoho LandingPage?
Zoho LandingPage Resources