# Protect your app user accounts via a business hub

{% hint style="info" %}
**Who can use this feature?**

* Business hub **Owners**
* Only supported using the Cerby web app
  {% endhint %}

As a business hub **Owner**, you can perform the following security tasks over user accounts managed in Cerby via a business hub:

* [Turn on MFA for user accounts](#turn-on-mfa-for-user-accounts)
* [Rotate passwords for user accounts](#rotate-passwords-for-user-accounts)

The following sections describe each task.

***

## Turn on MFA for user accounts

When you turn on multi-factor authentication (MFA) for a user account via a business hub, verification codes are filled automatically when users log in through the Cerby web app or Cerby browser extension. When logging in on a mobile device, you must use the operating system’s autofill capability to fill in verification codes through the Cerby mobile app on iOS and Android.

To turn on MFA automatically for an app user account, you must complete the following steps:

1. Log in to your [Cerby](https://app.cerby.com/) workspace.
2. Select the **Business Hubs** option from the left menu. The **Business Hubs** page is displayed.
3. Click the **More options** (...) icon of the corresponding business hub card. A drop-down menu is displayed.
4. Select the **Settings** option from the menu. The business hub details page is displayed with the **Settings** tab activated.
5. Activate the **Users** tab.
6. Click the **Protect accounts** button of the corresponding user. A drop-down menu is displayed.
7. Select the **Turn On MFA** option. The **Turn on MFA** dialog box is displayed.
8. Click the **Turn on MFA** button. The dialog box closes, and a box is displayed with a message about the process. A success message box is displayed when the process is complete.

Now you are done.

***

## Rotate passwords for user accounts

When you rotate a password for a user account via a business hub, Cerby updates the password to a secure password compliant with your app's strength rules.

To rotate the password automatically for an app user account, you must complete the following steps:

1. Log in to your [Cerby](https://app.cerby.com/) workspace.
2. Select the **Business Hubs** option from the left menu. The **Business Hubs** page is displayed.
3. Click the **More options** (...) icon of the corresponding business hub card. A drop-down menu is displayed.
4. Select the **Settings** option from the menu. The business hub details page is displayed with the **Settings** tab activated.
5. Activate the **Users** tab.
6. Click the **Protect accounts** button of the corresponding user. A drop-down menu is displayed.
7. Select the **Rotate Password** option. The **Rotate Password** dialog box is displayed.
8. Click the **Rotate Password** button. The dialog box closes, and a box is displayed with a message about the progress of the process. A success message box is displayed when the process is complete.

Now you are done.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://help.cerby.com/setup-and-admin/business-hubs/managing-users-and-assets-via-a-business-hub/protect-your-app-user-accounts-via-a-business-hub.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.