> For the complete documentation index, see [llms.txt](https://docs.enginsight.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.enginsight.com/docs/manual/english/administration/settings/multi-factor-authentication.md).

# Multi-Factor Authentication

Configuring multi-factor authentication (MFA) here allows you to add an extra layer of security to your user account using any Authenticator app.

{% hint style="danger" %}
**Please note:** To use an added Authenticator app for MFA, the following requirements must be met:

* Two-factor authentication [must have been configured](/docs/manual/english/installation-and-configuration/installation-and-configuration/additional-configurations/two-factor-authentication.md) in Enginsight.
* The **Two-Factor Authentication at Login** setting must be enabled for the individual user under **User Account** → **Advanced Settings**.\
  OR\
  The **Two-Factor Authentication for All Team Members** setting must be enabled under **Organisation** → **Advanced Settings**.
  {% endhint %}

***

<i class="fa-compass">:compass:</i> Navigate to **Settings** → **Multi-Factor Authentication** to display a list of all linked Authenticator accounts. If you have not yet added an Authenticator app, this view will be empty.

From the [MFA Overview](#multi-faktor-authentifizierung-ubersicht), you can see:

* The display name of the Authenticator account.
* The device type on which the Authenticator app is running.

You can also [add new authenticator accounts](#multi-faktor-authentifizierung-hinzufugen) and [remove existing MFA connentions](#mfa-entfernen).

***

## Multi-Factor Authentication: Overview

The MFA overview is displayed as a table.

The following information is available:

<table><thead><tr><th width="199.9296875">Column</th><th>Description</th></tr></thead><tbody><tr><td>Serial Number</td><td>Displays the internal identifier of the added Authenticator account.</td></tr><tr><td>Description</td><td>Displays the display name of the Authenticator account as configured in the Authenticator app.</td></tr><tr><td>Device Type</td><td>Displays the device type on which the Authenticator app is running.</td></tr></tbody></table>

***

## Adding Multi-Factor Authentication

<i class="fa-computer-mouse">:computer-mouse:</i> Click <i class="fa-plus">:plus:</i> **Add Authenticator Code** and confirm the prompt that appears to link the Enginsight platform with an Authenticator app on your mobile device.

A window containing a QR code will open.

<i class="fa-qrcode-read">:qrcode-read:</i> Scan the QR code using your Authenticator app, or enter the Authenticator code manually to link the app to the Enginsight platform.

<i class="fa-computer-mouse">:computer-mouse:</i> Click **Test Authenticator Code** to perform a test authentication. Enter the code displayed in your Authenticator app and confirm the test by clicking **Verify**.

***

## Removing Multi-Factor Authentication

There are two ways to remove an added Authenticator account:

* <i class="fa-computer-mouse">:computer-mouse:</i> Click <i class="fa-unlock-keyhole">:unlock-keyhole:</i> **Remove Current MFA Trust** in the upper-right corner of the view to remove all configured Authenticator accounts.
* <i class="fa-computer-mouse">:computer-mouse:</i> Click the **Delete** icon <i class="fa-trash">:trash:</i> at the end of a list item to remove the corresponding Authenticator account.

***
