# Turn on MFA for your Cerby account

{% hint style="info" %}
**Who can use this feature?**

* Workspace **Owners**, **Super Admins**, **Admins**, **Users**, and **Guest Users**
* Only supported using the Cerby web app
  {% endhint %}

As a [**Guest User**](https://help.cerby.com/getting-started/concepts/user-management/guest-users) or a member of a [local user workspace](https://help.cerby.com/setup-and-admin/workspace-identity-federation/local-workspace/create-and-configure-a-local-workspace), you must turn on multi-factor authentication (MFA) for your Cerby account to use any of the Cerby client apps: web app, browser extension, and mobile app.

This security requirement applies when you are an external collaborator in a workspace not managed by an identity provider or when you have any role (**Owner**, **Super Admin**, **Admin**, and **User**) in a local user workspace.

Typically, you are prompted to turn on MFA immediately after your first login or if your MFA method has been reset by a workspace **Admin**. All Cerby client apps require this setup before you can access the platform's features.

{% hint style="danger" %}
**IMPORTANT:** For the MFA setup, you must always use the Cerby web app on your computer and the authenticator app approved by your organization (for example, Google Authenticator, Okta Verify, or Microsoft Authenticator) on your mobile phone because you have to scan a QR code.
{% endhint %}

To turn on MFA for your Cerby account, you must complete the following steps:

1. Log in to your [Cerby](https://app.cerby.com/) workspace in a web browser.
2. Click the **Turn on MFA** button from the **Add a second layer of protection** banner. A wizard is displayed with a QR code.
3. Open the authenticator app on your mobile phone.
4. Follow the instructions to add an account by scanning a QR code. A six-digit code, also known as a time-based one-time password (TOTP), is generated.
5. Click the **Next** button from the dialog box you left open in the Cerby web app. The **Try the authentication code** page of the wizard is displayed.
6. Enter the code generated by your authentication app in the **Authentication Code** field.
7. Click the **Verify** button. The dialog box closes, and a success message box is displayed.

Now you are done.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://help.cerby.com/cerby-web-app/users/turn-on-mfa-for-your-cerby-account.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.