IBM Cloud Docs
Managing verification methods and MFA factors

Managing verification methods and MFA factors

You can add and delete your verification methods and authentication factors on the Verification methods and authentication factors page. You might want to update these settings if an email address or phone number that you use to verify your identity or authenticate to IBM Cloud® changes or becomes inaccessible.

You can view a log of recent changes to your verification methods and authentication factors by clicking Show events on the Verification methods and authentication factors page.

Accessing your verification methods and authentication factors

Verification methods and authentication factors add an extra layer of security to accounts. To view and modify your verification methods and authentication factors, complete the following steps:

  1. Go to the Verification methods and authentication factors page.

  2. Validate your identity with two different verification methods. You must verify your identity each time that you access the Verification methods and authentication factors page.

  3. Enter the one-time password (OTP) that is sent to the method you choose, and click Verify. Complete this step for each method.

Managing methods for verifying your identity

You can add and remove the verification methods that identify you as a user in the account. Make sure that you add backup verification methods in case one of them becomes inaccessible. Verification methods are used each time that you access the Verification methods and authentication factors page. If a verification method is not in use, remove it.

If one or more verification methods are inaccessible, and you are unable to verify your identity, you can open a support case to reset these methods.

Adding a verification method

To add a verification method, complete the following steps:

  1. From the Verification methods and authentication factors page, click Manage verification methods.
  2. Click Add.
  3. Select a new verification method.
  4. Name the verification method.
  5. Enter the phone number or email address.
  6. Click Send OTP.
  7. Enter the OTP that you receive.
  8. Click Complete.

Removing a verification method

To remove a verification method, complete the following steps:

  1. From the Verification methods and authentication factors page, click Manage verification methods.
  2. Select the method that you want to remove.
  3. Click Remove.
  4. Click Yes to confirm that you want to remove the verification method.

Managing your authentication factors

If an account administrator enables MFA in at least one of the accounts that you are a member of, you must use an authentication factor, in addition to your username and password, to securely log in to IBM Cloud.

Adding authentication factors

Authentication factors are used to authenticate yourself each time you log in to IBM Cloud if an administrator enables MFA in at least one of the accounts you are a member of. These factors can be something that you have, like a U2F security key, or that you receive, like a time-based one time passcode (TOTP), or OTP. Make sure you add backup authentication factors. This way, you can prevent losing access to IBM Cloud in the case that one of them becomes inaccessible.

  1. From the Verification methods and authentication factors page, click Show authentication factors.
  2. Click Add.
  3. Select an authentication factor and enter a name. This name is used to identify the authentication factor.
    1. For U2F, insert your U2F security stick, and click Register Key.
    2. For TOTP, scan the QR code, and enter the code that is generated by your authenticator app.
    3. For Email-based, enter the email address where you want to receive the OTPs.
      1. Click Send OTP.
      2. Enter the OTP that you receive.
  4. Click Complete.

Removing authentication factors

Remove an authentication factor if you don't have access to it anymore to ensure the security of your account.

  1. From the Verification methods and authentication factors page, click Show authentication factors
  2. Select an authentication factor.
  3. Click Remove.
  4. Click Yes to confirm that you want to remove the authentication factors.

You can also enable and disable MFA for your own account on the Verification methods and authentication factors page. Changing the authentication settings for an account impacts all members of the account. By enabling MFA, you can require more secure logins for your account. For more information, see Enabling MFA in your account.

Resetting authentication factors

You can update or reset your authentication methods if the email address or phone number that you use to authenticate to the IBM Cloud console changes or becomes inaccessible.

  1. Go to the Verification methods and authentication factors page.
  2. Validate your identity with two different verification methods.
  3. Click Show accounts.
  4. Take note of the Authentication setting for each account.
    1. If the account uses MFA for IBMid users, work with the IBMid help desk to reset your authentication factors.
    2. If the account uses MFA for All users, you can add new authentication factors on the Verification methods and authentication factors page and remove the old ones.