# MFA Codes

MFA (Multi-Factor Authentication) codes are numeric credentials used exclusively on keypad readers as a secondary authentication method. These codes only apply when a door operates under a **Card + Code Entry** schedule.

If a user has an MFA code configured and attempts to access a door with a **Card + Code Entry** schedule, they must first scan their badge and then enter their MFA code to gain entry.

{% hint style="danger" %}
You need [Access User Admin, Access User Manager, or Access Credential Manager permissions](https://help.verkada.com/access-control/getting-started/roles-and-permissions-for-access-control) to manage user MFA codes.
{% endhint %}

***

### Before you begin

When configuring an MFA code, keep the following constraints in mind:

* The code must be 4 to 16 digits long.
* Multiple users can share the same MFA code.
* A user can have multiple MFA codes.
* A user can have both an entry code and one or more MFA codes.

{% hint style="warning" %}
Access controllers must be updated during initial installation to ensure multi-factor authentication (MFA) codes function properly.
{% endhint %}

***

## Configure a MFA code for a user

{% stepper %}
{% step %}
**In Verkada Command, go to All Products > Access.**
{% endstep %}

{% step %}
**In the left navigation, click Access Users and Groups.**
{% endstep %}

{% step %}
**Select the specific user > Credentials.**

a. Click **Add MFA Code.**\
b. Enter the desired MFA code manually or click **Generate** to auto-generate a random code.
{% endstep %}
{% endstepper %}

The code will appear under **MFA Code**, where it can be edited or deleted as needed.

### Bulk configure MFA codes

MFA codes can also be configured in bulk using:

* User or Credential CSV Imports
* API Endpoints
  * [Add MFA Code to User](https://apidocs.verkada.com/reference/access-user-guide)
  * [Delete MFA Code from User](https://apidocs.verkada.com/reference/access-user-guide)