# MFA Codes

MFA (Multi-Factor Authentication) codes are numeric credentials used exclusively on keypad readers as a secondary authentication method. These codes only apply when a door operates under a **Card + Code Entry** schedule.

If a user has an MFA code configured and attempts to access a door with a **Card + Code Entry** schedule, they must first scan their badge and then enter their MFA code to gain entry.

{% hint style="danger" %}
You need [Access User Admin, Access User Manager, or Access Credential Manager permissions](/access-control/getting-started/roles-and-permissions-for-access-control.md) to manage user MFA codes.
{% endhint %}

***

### Before you begin

When configuring an MFA code, keep the following constraints in mind:

* The code must be 4 to 16 digits long.
* Multiple users can share the same MFA code.
* A user can have multiple MFA codes.
* A user can have both an entry code and one or more MFA codes.

{% hint style="warning" %}
Access controllers must be updated during initial installation to ensure multi-factor authentication (MFA) codes function properly.
{% endhint %}

***

## Configure a MFA code for a user

{% stepper %}
{% step %}
**In Verkada Command, go to All Products > Access.**
{% endstep %}

{% step %}
**In the left navigation, click Access Users and Groups.**
{% endstep %}

{% step %}
**Select the specific user > Credentials.**

a. Click **Add MFA Code.**\
b. Enter the desired MFA code manually or click **Generate** to auto-generate a random code.
{% endstep %}
{% endstepper %}

The code will appear under **MFA Code**, where it can be edited or deleted as needed.

### Bulk configure MFA codes

MFA codes can also be configured in bulk using:

* User or Credential CSV Imports
* API Endpoints
  * [Add MFA Code to User](https://apidocs.verkada.com/reference/access-user-guide)
  * [Delete MFA Code from User](https://apidocs.verkada.com/reference/access-user-guide)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://help.verkada.com/access-control/users-and-credentials/multi-factor-authentication-mfa-codes.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.