---
title: "Turning on multifactor authentication (MFA)"
license: public-domain
license_url: https://creativecommons.org/publicdomain/mark/1.0/
source: https://www.cisa.gov/secure-our-world/turn-mfa
source_license: "public domain (US government work); page marked archived by CISA"
attribution: "Summary by iinventedlight (AI-assisted). Source: Cybersecurity and Infrastructure Security Agency, \"Turn On MFA (Secure Our World)\" (public domain (US government work); page marked archived by CISA)."
condensed_by: "iinventedlight (Grok Bot, AI-assisted)"
fact_checked: 2026-11-02
date: 
status: reviewed
reviewed_on: 2026-11-02
category: how-to
checked_on: 2026-11-02
license_url: https://creativecommons.org/publicdomain/mark/1.0/
source: https://www.cisa.gov/secure-our-world/turn-mfa
source_license: "public domain (US government work)"
license_note: "Every fact below restates US government public-domain pages listed under sources. This summary is also offered as public domain."
attribution: "Summary by iinventedlight (AI-assisted). Courtesy of Cybersecurity and Infrastructure Security Agency. Public domain (US government work); use does not imply endorsement by Cybersecurity and Infrastructure Security Agency."
condensed_by: "iinventedlight (Grok Bot, AI-assisted)"
fact_checked: 2026-11-02
date: 2026-11-02
category: how-to
tags: how-to, security, mfa, 2fa
checked_on: 2026-11-02
sources:
  - id: S1
    title: "Turn On MFA (Secure Our World)"
    publisher: Cybersecurity and Infrastructure Security Agency
    url: https://www.cisa.gov/secure-our-world/turn-mfa
    accessed: 2026-11-02
    license: "public domain (US government work); page marked archived by CISA"
---
# Turning on multifactor authentication (MFA)

# Turning on multifactor authentication (MFA)

## Summary
MFA adds a second check, such as a code from an app or a fingerprint, so a stolen password alone cannot open your account. CISA advises turning it on for every account that offers it, starting with email, banking and social media.

*Draft. License: public domain (US government work). Sources: [S1] Cybersecurity and Infrastructure Security Agency, "Turn On MFA (Secure Our World)".*

## Facts
- id: F1
  claim: MFA confirms your identity with a second step at login, so someone with only your stolen password cannot get in.
  confidence: medium
  date: 2026-11-02
  sources: [S1]
  license: public domain (US government work)
  checked_on: 2026-11-02
- id: F2
  claim: To turn it on, open the account settings, find the security section, and look for an option called two-factor or two-step authentication.
  confidence: medium
  date: 2026-11-02
  sources: [S1]
  license: public domain (US government work)
  checked_on: 2026-11-02
- id: F3
  claim: Common second-step options are a code sent by text or email, an authenticator app that makes a new code about every 30 seconds, and biometrics such as a face or fingerprint.
  confidence: medium
  date: 2026-11-02
  sources: [S1]
  license: public domain (US government work)
  checked_on: 2026-11-02
- id: F4
  claim: CISA recommends enabling MFA on every account that offers it, especially email, banking, shopping, social media and healthcare accounts.
  confidence: medium
  date: 2026-11-02
  sources: [S1]
  license: public domain (US government work)
  checked_on: 2026-11-02

## Disagreements
CISA marks this page as archived content; the steps are still generic and widely applicable. Check cisa.gov for the current version.