MS Authenticator App

How to enable 2FA on Salesforce

Enable two-factor authentication on Salesforce to stop unauthorized logins. After setup, Salesforce asks for a rotating code from MS Authenticator App in addition to your password.

Step-by-step setup

  1. 1

    Locate 2FA Settings

    Log in to your Salesforce account and click Settings from the drop-down menu next to your profile picture in the upper right corner.

    salesforce 2FA setup — Locate 2FA Settings
  2. 2

    Select One-Time Password Authenticator

    Find and click on: Advanced User Details then next to the App Registration One-Time Password Authenticator click Continue

    salesforce 2FA setup — Select One-Time Password Authenticator
  3. 3

    Verify Your Identity

    Salesforce will send you an email with Verification Code that need to be confirmed in this step.

    salesforce 2FA setup — Verify Your Identity
  4. 4

    Set up Two-Factor Authentication

    In this step is shown the QR Code that contains the secret key which you need to scan with MS Authenticator App. Keep this page open as you reach for your device.Note: Do not scan the demo image shown below.

    salesforce 2FA setup — Set up Two-Factor Authentication
  5. 5

    Capture QR Code

    Open MS Authenticator App, tap the plus button, and hold your device up to the computer screen to scan the QR Code from Salesforce web page.

    salesforce 2FA setup — Capture QR Code
  6. 6

    Verification code

    After successfully scanning the QR Code, MS Authenticator App will automatically choose the Salesforce logo and autofill the account name and secret key. Click on Save when ready. Tip: You can choose the account icon by pressing on icon

    salesforce 2FA setup — Verification code
  7. 7

    Confirm OTP code

    Returning to the Salesforce, enter the numerical code from MS Authenticator App in the appropriate field. When done click Connect and that's all. Your Salesforce account is now protected.

    salesforce 2FA setup — Confirm OTP code

Menu names on Salesforce can change — the official Salesforce 2FA documentation ↗ always has the exact, current path.

Frequently asked questions

Does Salesforce work with authenticator apps like MS Authenticator App?
Yes. Salesforce supports TOTP authenticator apps, so you can generate its two-factor codes in MS Authenticator App.
Is Salesforce two-factor authentication free?
Yes. Enabling authenticator-app 2FA on Salesforce is free — you only need the free MS Authenticator App.
What if I lose access to my Salesforce 2FA codes?
Use the backup or recovery codes you saved during setup. If you didn't save them, contact Salesforce support to regain access, then re-add the account to MS Authenticator App.
Should I use an authenticator app or a security key on Salesforce?
Salesforce supports both. An authenticator app like MS Authenticator App is free and works on any phone; a hardware security key adds phishing resistance. You can enable both.

Generate your Salesforce codes in MS Authenticator App

Free, offline, and encrypted. One tap for every 6-digit code.

Get the app

More Developer guides

Novaz is not affiliated with, endorsed by, or sponsored by Salesforce. Salesforce and its logo are trademarks of their respective owner and are used here for identification only.