# Cerby-managed verification methods for your accounts

{% hint style="info" %}
**Who can use this feature?**

* Workspace **Owners**, **Super Admins**, **Admins**, and **Users**
* **Account Owners**
* Supported using the Cerby web app and mobile app
  {% endhint %}

Cerby helps you protect your shared accounts by centralizing and automating the verification methods used during login. Instead of relying on personal multi-factor authentication (MFA) devices or external email and SMS channels, Cerby can manage, store, and deliver verification codes securely to all authorized users, improving security, privacy, and team collaboration.

***

## Why centralized verification matters

Cerby recommends enabling multiple verification methods where possible, prioritizing the authenticator app above other methods.

The following are the key benefits of centralized verification using Cerby:

* **Streamlined login experience:** After configuration, Cerby can **automatically enter** time-based one-time passwords (TOTPs), SMS one-time passwords (OTPs), and other codes during login flows, reducing manual steps and login friction. Users can also manually copy codes from the Cerby client apps if necessary.
* **Centralized control and shared access:** Verification codes sent to Cerby-managed email addresses or phone numbers are routed into Cerby’s Shared Inbox. This means codes are accessible to all users who need them, without exposing personal contact details.
* **Encrypted and private:** Cerby applies a zero-knowledge security model to sensitive time-based codes. Even Cerby’s internal systems cannot read the stored MFA secrets or TOTPs.
* **Improved collaboration:** All users with shared access to an account can retrieve verification codes without coordination overhead, avoiding bottlenecks when a single person is unavailable.
* **Reduced exposure of personal info:** Using corporate-managed contact channels reduces the risk of exposing employees’ personal email addresses or phone numbers to external services, thereby lowering privacy and phishing risks.

***

## Cerby-managed verification methods

Cerby supports four distinct methods you can configure for your accounts:

* [Authenticator app](#authenticator-app)
* [Cerby-managed email address](#cerby-managed-email-address)
* [Cerby-managed phone number](#cerby-managed-phone-number)
* [RSA codes](#rsa-codes)

The following sections describe each verification method.

### Authenticator app

Cerby serves as your authenticator app by generating TOTPs that refresh every 30 seconds. These codes can be used for MFA on supported apps and are shared with all authorized users.

{% hint style="success" %}
**TIP:** This verification method is preferred for the correct functionality among your apps and Cerby. For more information, refer to the article [Turn on MFA with Cerby as an authenticator app](https://help.cerby.com/cerby-web-app/accounts/protecting-your-accounts/turn-on-mfa-with-cerby-authenticator-for-an-account).
{% endhint %}

***

### Cerby-managed email address

Create and configure an email address managed by Cerby and owned by your company to receive MFA verification codes. Cerby then routes these codes into the Shared Inbox for retrieval or automated logins.

{% hint style="success" %}
**TIP:** Use this verification method when MFA via email is supported or required by the application. For more information, refer to the articles \_\_[Set up and associate a Cerby-managed email address for your account](https://help.cerby.com/cerby-web-app/accounts/managing-your-accounts/set-up-and-associate-a-cerby-managed-email-address-for-your-account) and [Turn on MFA with a Cerby-managed email address for your account](https://help.cerby.com/cerby-web-app/accounts/protecting-your-accounts/turn-on-mfa-with-a-cerby-managed-email-address-for-your-account).
{% endhint %}

***

### Cerby-managed phone number

Similar to managed email, a corporate phone number can be created in Cerby to receive SMS verification codes. These codes are centralized in the Shared Inbox and used for MFA or automated login flows.

{% hint style="success" %}
**TIP:** Use this verification method when SMS-based MFA is required.\_\_ For more information, refer to the articles [Set up and associate a Cerby-managed phone number for your account](https://help.cerby.com/cerby-web-app/accounts/managing-your-accounts/set-up-and-associate-a-cerby-managed-phone-number-for-your-account) and [Turn on MFA with a Cerby-managed phone number for your account](https://help.cerby.com/cerby-web-app/accounts/protecting-your-accounts/turn-on-mfa-with-a-cerby-managed-phone-number-for-your-account).
{% endhint %}

***

### RSA codes

Cerby can integrate with RSA token-based MFA systems to retrieve and autofill one-time codes generated by RSA. This allows automated logins while preserving strong token security.

{% hint style="success" %}
**TIP:** Use this verification method when your app uses RSA token MFA. For more information, refer to the articles [Set RSA tokens as your account verification method](https://help.cerby.com/cerby-web-app/accounts/protecting-your-accounts/set-rsa-tokens-as-your-account-verification-method) and [Turn on the RSA codes for your account using the Cerby mobile app](https://help.cerby.com/cerby-mobile-app/accounts/protecting-your-accounts/turn-on-the-rsa-codes-for-your-account).
{% endhint %}

***

***

## Best practices for enterprise security

The following are some of the best practices we recommend for improving the security of your accounts:

* **Enable at least two verification methods:** If the primary method fails or is unavailable, having a secondary method improves resilience.
* **Use corporate-owned channels:** Reduces reliance on personal devices and protects employee privacy.
* **Centralize for shared access:** Makes MFA codes available to all authorized users, preventing access bottlenecks.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://help.cerby.com/tips-and-troubleshooting/best-practices/accounts/explore-the-cerby-managed-verification-methods-for-your-accounts.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
