> ## Documentation Index
> Fetch the complete documentation index at: https://docs.macstadium.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Two-Factor Authentication (2FA)

> MacStadium offers the ability for customers to enable two-factor authentication (2FA) when logging into portal.macstadium.com. Two-factor authentication.

## About

MacStadium offers the ability for customers to enable two-factor authentication (2FA) when logging into [portal.macstadium.com](https://portal.macstadium.com). Two-factor authentication provides customers with an additional layer of security when accessing environments.

## Overview

Two-factor authentication is available for anyone with Portal access.

<Note>2FA is NOT turned on by default. It is not required to log in to [portal.macstadium.com](https://portal.macstadium.com). It can easily be turned on/off from inside the Customer Portal.</Note>

## Getting Started

You must have an account in [portal.macstadium.com](https://portal.macstadium.com) to use two-factor authentication.

<Note>If there is no account in the Customer Portal, request one from an existing account administrator within your organization. For questions, email [support@macstadium.com](mailto:support@macstadium.com).</Note>

**Enabling Two-Factor Authentication:**

1. Log into [portal.macstadium.com](https://portal.macstadium.com).
2. Click your avatar in the top right corner.
3. Click **Users** from the dropdown.
4. Click **Security**.
5. Click **Enable Two-Factor Authentication**.
6. Click **Next**.
7. Open an authenticator app on a mobile device and scan the barcode.

<Tip>An authenticator app can be downloaded from the Apple App Store or Google Play.</Tip>

8. Enter the corresponding code provided by your authenticator app.

9. Two-factor authentication now changes to **Active** in the *Security* tab of the Portal.

## First Login After Enabling 2FA

On the next login, the sign-in screen looks different after entering your username and password:

1. Once authenticated, you are prompted to open your authenticator app.
2. The authenticator app provides a 6-digit code.
3. Enter the 6-digit code to gain access.

## Mandatory 2FA Enforcement

The Mandatory Two-Factor Authentication (2FA) Enforcement feature empowers administrators to enhance the security of user accounts by enforcing compulsory 2FA for all associated users. By enabling this functionality, administrators ensure an additional layer of protection for sensitive information and transactions within the Customer Portal.

<Note>This feature is accessible only to team members with Administrator roles. Mandatory 2FA is disabled by clicking the **Disable Mandatory 2FA** button.</Note>

<Note>2FA can be disabled by clicking the **Disable** button in the *Security* tab.</Note>

If there is a need to disable two-factor authentication, but access to the phone that was used to authenticate is missing, then:

1. Send a request to [support@macstadium.com](mailto:support@macstadium.com).
2. Give the Support Team the code used to enable 2FA.
3. The Support Team can remotely disable it.
4. Once it is turned off, login with the administrator *username* and *password*.