# Turn on MFA with Cerby authenticator for an account

{% hint style="info" %}
**Who can use this feature?**

* Workspace **Owners**, **Super Admins**, **Admins**, and **Users**
* **Account Owners**
* Supported using the Cerby mobile app and web app. For the web app instructions, read the article [Turn on MFA with Cerby authenticator for an account using the web app](https://help.cerby.com/cerby-web-app/accounts/protecting-your-accounts/turn-on-mfa-with-cerby-authenticator-for-an-account)
  {% endhint %}

As an account **Owner**, you can turn on multi-factor authentication (MFA) manually to add a second layer of protection to your account.

This experience is intended for scenarios where the automated task to turn on MFA cannot be completed or is not supported, either because it involves a [self-managed account](https://help.cerby.com/getting-started/concepts/credential-management/accounts#h-079d120056) or the app requires manual intervention due to recent user interface (UI) updates.

Cerby is set as an authenticator app to generate and distribute time-based one-time passwords (TOTPs) for your account, and fill them in during automated logins.

To turn on MFA manually with Cerby authenticator for an account using the Cerby mobile app, you must complete the following steps:

1. Log in to your app on your mobile phone.
2. Navigate to the MFA or two-factor authentication (2FA) screen in the app settings.
3. Select the option to turn on MFA with an authenticator app. A screen with a QR code is displayed. ​**NOTE:** Commonly, apps display a QR code, but if a secret key is displayed instead, proceed to step 5.
4. Look for the option to use a secret key; sometimes, you must tap a **Can’t scan code?** button. An alphanumerical secret key is displayed.
5. Copy the secret key.
6. Enter the secret key in the Cerby mobile app to set up MFA by completing the following steps:
7. Open the Cerby mobile app.
8. Log in to your Cerby workspace.
9. Tap the corresponding account card. The account details screen is displayed.
10. Tap the **Activate MFA** button. The mobile phone's camera is displayed.
11. Tap the **Can’t scan the QR code?** button. The **Enter key manually** screen is displayed.
12. Paste the secret key in the **Secret key** field.
13. Tap the **Save secret key** button. A six-digit code is displayed on a new screen.
14. Tap the **Copy** icon.
15. Finish the MFA setup in your app by completing the following steps:
16. Switch to the app where you retrieved the secret key.
17. Continue with the MFA setup flow.
18. Paste or enter the six-digit code.
19. Save the configuration.
20. Switch to the Cerby mobile app.
21. Tap the **Done** button. The screen closes.
22. Save the account backup or recovery codes in Cerby, if supported by the app, by following the instructions in the article [Save the backup or recovery codes of your account](https://help.cerby.com/cerby-web-app/accounts/protecting-your-accounts/save-the-backup-or-recovery-codes-of-your-account).

{% hint style="danger" %}
**IMPORTANT:** You can only save the backup or recovery codes of your account using the Cerby web app. When supported, Cerby recommends that you do it right after completing the MFA setup.
{% endhint %}

Now you are done.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://help.cerby.com/cerby-mobile-app/accounts/protecting-your-accounts/turn-on-mfa-with-cerby-authenticator-for-an-account.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.