Two-factor authentication setup
Configure the intended MFA policy for privileged admin accounts.
This screen configures a demo policy only. It does not enroll a device, generate a secret, or validate a one-time code.
2FA policy
Use an authenticator app, passkey or hardware security key where supported.
Demo only: saved in this browser, not enforced by a backend.
Setup checklist
Choose an approved authenticatorAuthenticator app or phishing-resistant passkey
PendingVerify enrollmentReal flow requires challenge verification
Not configuredGenerate recovery codesStore securely and show once only
Not configured