> ## Documentation Index
> Fetch the complete documentation index at: https://developer.upsun.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Multifactor Authentication (MFA)

> Enhance your organizations' security with Multifactor Authentication (MFA).

export const MoreIcon = () => <svg width="24px" height="24px" style={{
  display: 'inline',
  verticalAlign: 'middle'
}}>
    <title id="more-icon">More</title>
    <path d="M12 6.5C12.8284 6.5 13.5 5.82843 13.5 5C13.5 4.17157 12.8284 3.5 12 3.5C11.1716 3.5 10.5 4.17157 10.5 5C10.5 5.82843 11.1716 6.5 12 6.5Z" fill="current"></path>
    <path d="M12 13.5C12.8284 13.5 13.5 12.8284 13.5 12C13.5 11.1716 12.8284 10.5 12 10.5C11.1716 10.5 10.5 11.1716 10.5 12C10.5 12.8284 11.1716 13.5 12 13.5Z" fill="current"></path>
    <path d="M12 20.5C12.8284 20.5 13.5 19.8284 13.5 19C13.5 18.1716 12.8284 17.5 12 17.5C11.1716 17.5 10.5 18.1716 10.5 19C10.5 19.8284 11.1716 20.5 12 20.5Z" fill="current"></path>
  </svg>;

<Info>
  **Feature Availability**

  This feature is available as part of the Advanced User Management add-on. You can [upgrade your organization to this add-on](/docs/administration/billing/add-on-subscription#upgrade-to-the-advanced-user-management-add-on) in the Console.

  For details about the other features included in this add-on, see the [Advanced User Management add-on](/docs/administration/billing/add-on-subscription#advanced-user-management-add-on) help topic section; for pricing information, see the [Upsun pricing](https://upsun.com/pricing/) page.
</Info>

Multifactor Authentication (MFA) enhances security by protecting both your organization and every user account that interacts with it
through SSH or the Upsun API.

When MFA is enforced within an organization, every project contributor **must** enable MFA on their user account so they can run Git commands,
SSH into an environment, or trigger actions through the Upsun API.

## Enable MFA on your user account

To access an organization that enforces MFA or any of its projects,
you **must** enable MFA on your user account.
Failure to do so results in forbidden access to the organization from the Console or API,
and an [error message](/docs/development/ssh/troubleshoot-ssh#mfa-related-error-message) when trying to SSH into its environments.

To enable MFA on your user account, follow these steps:

1. In the Console, open the user menu (your name or profile picture).
2. Click **My profile**.
3. On the **Authentication Settings** tab, click **Set up application**.
4. Follow the instructions for the chosen authentication app.
5. Click **Verify & save**.
6. Refresh your SSH credentials by running `upsun login -f` in the CLI.

## Enforce MFA within your organization

Prerequisites:

* You must be an **organization owner** or **admin user**.
* Your organization must have the [Advanced User Management add-on](/docs/administration/billing/add-on-subscription#advanced-user-management-add-on).
* You must first [enable MFA on *your own* user account](#enable-mfa-on-your-user-account) as described above.

To enforce MFA within your organization, follow these steps:

1. In the Console, select an organization from the organization menu in the upper left of the page.

2. Click the organization name again, and from the expanded menu, click **Security**.

   On the **Security** tab, in the **User security settings** section, you can see which users in your organization have [activated MFA for their user accounts](#enable-mfa-on-your-user-account).

3. In the **MFA required** section, click the **Enable MFA** toggle to the on position.

### Send email reminders

To send email reminders to users who haven't enabled MFA on their account:

1. In the Console, select an organization from the organization menu in the upper left of the page.
2. Click the organization name again, and from the expanded menu, click **Security**.
3. On the **Security** tab, in the **User security settings** section, complete the steps below based on the action you want to take.<br /><br />

   * To send an email reminder to an individual user, click **<MoreIcon /> More** beside the user's name and then click **Remind**.<br />

   * To send an email reminder to multiple users at once, select the checkbox beside the names of the users you want to remind. To remind *all* of the users who do not have MFA enabled, select the **Name** checkbox at the top of the list. Then, near the **Name** checkbox, click **Remind**.

An email is sent to the user with instructions on how to enable MFA on their user account.