> For the complete documentation index, see [llms.txt](/docs/llms.txt) # Self-Service Account Management | FusionAuth Docs Setting up multi-factor authentication as an admin and user, as well as configuring the self-service account management pages. # Self-Service Account Management This feature is only available in paid plans. To learn more, see [our pricing page](/pricing). Available since version `1.26.0` FusionAuth self-service account management allows users to manage their accounts, including the ability to add Multi-factor Authentication (MFA). This documentation section covers: * [Update User Data & Password](/docs/lifecycle/manage-users/account-management/updating-user-data) * [Add Two-Factor Method - Authenticator](/docs/lifecycle/manage-users/account-management/two-factor-authenticator) * [Add Two-Factor Method - Email](/docs/lifecycle/manage-users/account-management/two-factor-email) * [Add Two-Factor Method- Phone](/docs/lifecycle/manage-users/account-management/two-factor-phone) * [Add WebAuthn Passkey](/docs/lifecycle/manage-users/account-management/add-webauthn) * [Customizing Account Management](/docs/lifecycle/manage-users/account-management/customizing-account-management) * [Troubleshooting](/docs/lifecycle/manage-users/account-management/troubleshooting) Here's a brief video showing account management functionality. [Play](https://youtube.com/watch?v=_HJ4yymXYrs) ### A Note About User Images in this Documentation[#](#a-note-about-user-images-in-this-documentation) Throughout this self service account management section we will use: Richard Hendricks for any `user` facing actions. Imagine Richard is a user on your site, trying to enable MFA for his account, or update his profile data. ![User Profile Image Richard](/img/docs/lifecycle/manage-users/account-management/richard-hendricks-small-profile.png) Erlich Bachman for any `admin` facing actions. Imagine Erlich is you or a customer service rep at your company. ![User Profile Image Erlich](/img/docs/lifecycle/manage-users/account-management/erlich-bachman-small-profile.png) ## Finding the Self Service Page[#](#finding-the-self-service-page) To view the account and self service pages, login as an admin and navigate to Applications and click on the icon to view the application details. From here copy and paste the account URL into a browser. Use a different browser than the one you are using to access the FusionAuth administrative user interface, or use your browser in incognito mode. In a real world application this link would be part of the navigation for your application. ![Home Screen](/img/docs/lifecycle/manage-users/account-management/applications-home.png) ### Account Home[#](#account-home) Before accessing the account you will be asked to log in. Make sure the user you log in with is registered for this application. ![Login Screen](/img/docs/lifecycle/manage-users/account-management/account-login.png) ### Update User Data and Password[#](#update-user-data-and-password) FusionAuth Self Service Account Management allows users to easily update their user data and passwords. To adjust user profile data, click on the edit icon in the upper corner. From there a user will be presented with editable fields for user data and their password. More information about updating user data and passwords can be found in the [Updating User Data and Password](/docs/lifecycle/manage-users/account-management/updating-user-data) section. ![Self Service Edit Data and Password](/img/docs/lifecycle/manage-users/account-management/user-self-serve-edit-password-crop.png) ### Enable or Disable MFA as a User[#](#enable-or-disable-mfa-as-a-user) ![Account Home](/img/docs/lifecycle/manage-users/account-management/account-management-index-crop.png) From click on Manage Two-Factor On this screen you can add Two-Factor methods. ![Account Home](/img/docs/lifecycle/manage-users/account-management/2fa-home-account-crop.png) FusionAuth supports the following types of MFA: * Authenticator * SMS (optionally delivered by voice since `1.65.0`) * Email If you are not seeing this screen, you may need additional configuration. Please see [troubleshooting](/docs/lifecycle/manage-users/account-management/troubleshooting) steps. You can click on the links below for more about setting up each MFA method. * [Add Two-Factor Method - Authenticator](/docs/lifecycle/manage-users/account-management/two-factor-authenticator) * [Add Two-Factor Method - Email](/docs/lifecycle/manage-users/account-management/two-factor-email) * [Add Two-Factor Method - Phone](/docs/lifecycle/manage-users/account-management/two-factor-phone) ### Recovery Codes[#](#recovery-codes) Please note that once an authenticator is enabled, users will be displayed recovery codes similar to what is shown below. Please encourage your users to save these in a secure location, as they can be used to recover an account, should one of their second factors fail to be available. For example, if an email or phone service is "down" and users still want to use your application, or if a user loses their phone, a recovery code allows access. ![Recovery Codes](/img/docs/lifecycle/manage-users/account-management/mfa-recovery-codes-crop.png) ## Logout[#](#logout) If you have enabled the [self-service account management](/docs/lifecycle/manage-users/account-management/) functionality of FusionAuth, this has a separate session from the FusionAuth SSO session or your application session. You must use the account logout endpoint to end this session. To do so, redirect the user to `/account/logout?client_id=...` where the `client_id` is the application Id for which you have set up self-service account management. This behavior is explained further in [this GitHub issue](https://github.com/FusionAuth/fusionauth-issues/issues/2298).