Intelligent MFA protects your users without the constant interruptions they hate about standard multi-factor authentication. It only challenges risky logins and lets trusted users sign in unopposed. Included in every plan, not a costly add-on.
The right form of MFA depends on your users and applications. FusionAuth's Intelligent MFA supports methods like email, SMS, and time-based one-time passwords (TOTP). Enable one or many, and control how long before users are re-prompted. Define policies that decide whether a login needs a challenge at all, so typical login patterns aren't challenged every time.
Users can set up MFA on their own using customizable profile management pages, including recovery codes. Or integrate with our APIs to embed MFA setup into your application.
learn more
Let users have as many different MFA methods as they want, including multiple email addresses, phone numbers, and authenticator apps. This reduces MFA device loss anxiety and increases ease of use for your users, while increasing account security by not tying MFA addresses with login identifiers.
Sometimes you want to be extra sure before a sensitive action, like sending money or deleting an account. Trigger an MFA request anywhere in your app using our APIs or SDKs. Factor in the login's risk score through the MFA Lambda to require a stronger method when that action lands in a risky session (Enterprise only).
Configure MFA rules on an application by application basis, allowing for targeted MFA prompts. Some apps require MFA to provide additional app security, others accept a tradeoff to reduce login friction. You’re in control.
FusionAuth is built from the ground up to be localized, including MFA messages. Support your global audience by delivering messages in their preferred language.
%20(1).avif)
Intelligent MFA scores each login across ten risk signals before deciding whether to challenge. More signals mean greater accuracy telling routine logins from genuine threats.
The presets handle most cases. When you need more, the MFA Lambda hands your code the login's risk score, so you make the final call: suppress a challenge for a known service-account IP, force one on a high-value transaction, or route a risky session to a stronger method. The risk score is yours to act on, in a Lambda that runs inside your own deployment.
.avif)
Every MFA challenge becomes a record your security team and auditors can see. Three MFA event webhooks fire as challenges happen:
No added login latency, because they're non-transactional. Stream them straight to your SIEM, and with user.login.suspicious you get a complete audit trail for every risk-based decision. (Enterprise only)
Downloads
Logins/sec Supported
Uptime SLA
Engineer-led Support
FusionAuth is a complete solution with no sacrifices. We got this. Go build something awesome.
start for free
