How Do I Bind a Virtual MFA Device?

Multi-factor authentication (MFA) adds an extra layer of protection on top of your username and password. After you enable MFA-based login authentication, you need to enter a verification code after authenticating your username and password. MFA, together with your username and password, ensures the security of your account and resources.

MFA devices can be based on hardware or software. However, IAM supports only virtual MFA devices.

A virtual MFA device is an application that generates 6-digit codes in compliance with the Time-Based One-Time Password Algorithm (TOTP). MFA applications can run on mobile devices (including smartphones) and are easy to use.

Prerequisites

You have installed an MFA application (for example, Google Authenticator) on your mobile phone.

Procedure

On the IAM console, choose Account Security Settings in the navigation pane.
Click the Critical Operations tab, and click Bind next to Virtual MFA Device.
Set up the MFA application by scanning the QR code or entering the secret key.
- Scan the QR code
- Enter the secret key
View the verification code. The code is automatically updated every 30 seconds.
On the Bind Virtual MFA Device page, enter two consecutive verification codes and click OK.