Enforce Multi-Factor Authentication for All Members of an Account

Table of Contents


Multi-Factor Authentication (MFA) provides an extra level of security to protect your user credentials. You can enforce MFA for account members by enabling the feature on the account.

When you have multiple users managing an account, it’s vital to reduce the likelihood of a user’s credentials being compromised. This feature is available on all accounts that have the ability to manage members of an account.

Enabling multi-factor authentication enforcement

You can enable multi-factor authentication enforcement from your account members page.

You can only enable MFA enforcement on an account if all users have MFA enabled. If they don’t enable it, you have to remove them from the team to enable this feature, then re-invite them. They’ll be asked to enable MFA after they sign up so they can join your account.

To enable multi-factor authentication enforcement
  1. Log in to DNSimple with your user credentials.
  2. Go to your account settings by selecting the or link from the navigation.

    Settings menu

  3. Select from the menu on the left.
  4. Scroll down until you see the section. When all members of your Team have MFA enabled, you can use this feature.

    Multi-factor authentication enforcement

  5. If there are users in your account who don’t have MFA enabled, you’ll see a list of users that are non-compliant. You can remove the users from the account in the section above.

Disabling multi-factor authentication enforcement

To disable multi-factor authentication
  1. Log in to DNSimple with your user credentials.
  2. Go to your account settings by selecting the or link from the navigation.

    Settings menu

  3. Select from the menu on the left.
  4. Scroll down until you see the section. There’s a link to the feature.

    Disable multi-factor authentication enforcement

Disabling multi-factor authentication while in an enforced team

If you’re part of a team that enforces MFA, you can still disable multi-factor authentication on your personal account.

If you disable MFA, you will be removed from all accounts that enforce MFA.

Inviting new people into an MFA-enforced team

There are no restrictions on inviting new people to your account. When you invite users who don’t already have DNSimple accounts, they’ll be asked to enable MFA after they sign up so they can join your account.

If the user already has a DNSimple account, they can only join the team if they have MFA enabled.