Enforce Multi Factor Authentication (MFA) | Zoho Vault

Multi Factor Authentication (MFA)

Secure your organization's Zoho Vault accounts further with multi-factor authentication (MFA). You can mandate that all users of your organization access Zoho Vault with an additional factor of authentication across all devices by enforcing MFA.


Different authentication methods
There are numerous authentication methods to choose from, as listed below.


Common options
Select one of the following authentication methods from the Multi-Factor Authentication section of your account settings, then follow the on-screen instructions. 

  • OTP authenticator (Google and Microsoft authenticator)
  • Security Key 
  • Passkey
  • Zoho OneAuth


​

Using Zoho OneAuth
OneAuth is Zoho's multi-factor authentication application for iOS and Android. With OneAuth, you can use a variety of authentication factors, such as:

  • Touch ID
  • Push notification
  • QR code
  • Time-based OTP
Note: You can check Trusted browser while authenticating to prevent being asked for your authentication code for this browser again.
Enforcing MFA for all users

  1. Select Settings, then click Enforce MFA from the User Management section.



  2. Select Enforce MFA and enter your Zoho password for validation. 



  3. Click Proceed to enforce MFA for all your users and their respective Zoho accounts.


Setting up MFA for your account

  1. Log in to your Zoho account with your password.
  2. Select an additional factor of authentication from the options displayed. The configured settings will be active from your next login. 

IdeaNote: You can add a backup number and save the backup codes that can help you log in even when you face issues with your mobile or other authentication methods.


Exempting users from MFA
You can disable MFA for specific users as follows
 

  1. Click Users from the User Management section of the Settings tab. 

  2. Select the users you'd like to exempt from MFA, then click More. 
  3. Select Disable MFA and enter your Zoho password to complete the action. The users will no longer require an additional factor to authenticate.


Resetting a user's MFA 
A Super Admin can reset a user's MFA if the user loses their device. The user can set up their MFA from the beginning. 

  1. Click Users from the User Management section of the Settings tab.
  2. Select the users you'd like to reset the MFA for, then click More. 
  3. Click Reset MFA, then enter your Zoho password to complete the action. The user can set up their new MFA again. 

WarningNote: Enabling MFA in Zoho Vault will enable it across all Zoho services. 
Need more help? Take a look at some of the commonly asked questions.