Add Email as a second factor

Email two-factor is not enabled by default. Configure your tenant by navigating to Tenants -> Edit Tenant -> Multi-Factor .

Enable MFA method on Tenant (Admin Facing)#

local.fusionauth.io

You can enable SMS MFA on the tenant level by following these steps:

• Toggle this MFA method by clicking enabled
• Select a two-factor authentication template (FusionAuth ships with a default to be customized if needed)

Enable Email Factor from Account Management (User Facing)#

local.fusionauth.io

1. Navigate back to your account page.
2. Click Manage two-factor
3. Click Add two-factor
4. There will be an option for Email.

local.fusionauth.io

local.fusionauth.io

Next,

1. Enter your email address.
2. Click on Send a one-time-code.
3. (Optional) Enter a name for this method (for example, Work email).
4. Enter the provided code.
5. Click Enable

Recovery Codes (User Facing)#

Now you will be presented with recovery codes. Save these in a safe space.

local.fusionauth.io

Success!

Upon the next login, you will be prompted for an emailed code in addition to your password.

See It in Action (User Facing)#

With email MFA enabled, if you log out and log back in you will be presented with the following screen in addition to the typical login screen.

local.fusionauth.io