How Do I Enable Login Verification?

To ensure account security, you are advised to enable login verification.

After you enable this function, you and IAM users created using your account need to enter verification codes generated by the bound virtual MFA device, SMS verification codes, or email verification codes on the Login Verification page during login.

If you disable this function, you and the IAM users only need to enter the account name/username and password during login.

Procedure

On the IAM console, enable login verification for IAM users as an administrator.

In the navigation pane, choose Users.
Click Security Settings in the row containing the target user.
On the Security Settings tab, in the Login Protection area, select a verification method and enter a verification code.
Click OK.

On the Account Security Settings page of the IAM console, enable login verification for yourself (account administrator).

On the IAM console, choose Account Security Settings in the navigation pane.
Click the Critical Operations tab, and click Enable in the Login Protection row.
On the Login Protection page, select Enable, select a verification method, and enter a verification code.
Click OK.

Related Operations

You can change the login verification method of your IAM users or account:

To change the login verification method of an IAM user, go to the user list on the IAM console, click Security Settings in the row that contains the user, click next to Verification Method under Login Protection, and then change the verification method.
To change the login verification method of your account, go to the Account Security Settings page. On the Critical Operations tab, click Change in the Login Protection row, and then change the verification method.