Different authentication methods
There are numerous authentication methods to choose from, as listed below.

Common options
Select one of the following authentication methods from the Multi-Factor Authentication section of your account settings, then follow the on-screen instructions. 

• OTP authenticator (Google and Microsoft authenticator)
  
• Security Key 
  
• Passkey
  
• Zoho OneAuth

​

• Touch ID
  
• Push notification
  
• QR code
  
• Time-based OTP
  

1. Select Settings, then click Enforce MFA from the User Management section.
   
   
   
   
2. Select Enforce MFA and enter your Zoho password for validation. 
   
   
   
   
3. Click Proceed to enforce MFA for all your users and their respective Zoho accounts.
   
   
   

Setting up MFA for your account

1. Log in to your Zoho account with your password.
   
2. Select an additional factor of authentication from the options displayed. The configured settings will be active from your next login. 
   
   

Note: You can add a backup number and save the backup codes that can help you log in even when you face issues with your mobile or other authentication methods.

Exempting users from MFA
You can disable MFA for specific users as follows
 

1. Click Users from the User Management section of the Settings tab. 
   
   
2. Select the users you'd like to exempt from MFA, then click More. 
   
3. Select Disable MFA and enter your Zoho password to complete the action. The users will no longer require an additional factor to authenticate.
   
   
   

Resetting a user's MFA 
A Super Admin can reset a user's MFA if the user loses their device. The user can set up their MFA from the beginning. 

1. Click Users from the User Management section of the Settings tab.
   
2. Select the users you'd like to reset the MFA for, then click More. 
   
3. Click Reset MFA, then enter your Zoho password to complete the action. The user can set up their new MFA again. 
   
   

Note: Enabling MFA in Zoho Vault will enable it across all Zoho services.