> ## Documentation Index
> Fetch the complete documentation index at: https://docs.levelblue.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Using Multi-Factor Authentication

<Icon icon="users" iconType="solid" /> Role Availability | ❌ Read-Only ❌ Analyst ✔️ Manager

To protect your USM Central account, enable <Tooltip tip="A method of access control in which a user is granted access only after successfully presenting several separate pieces of evidence to an authentication mechanism – typically at least two of the following categories: knowledge, possession, and inherence.">multi-factor authentication (MFA)</Tooltip>. MFA adds extra security because it requires multiple factors to authenticate a user, making it more difficult for an unauthorized person to gain access to the account. In USM Central, MFA provides a layered defense of two independent credentials: what you know (your user account name and password) and what you have (security token on your personal device).

To use MFA in USM Central, you must have a mobile device that supports an Authenticator app. LevelBlue recommends the [Google Authenticator app](https://support.google.com/accounts/answer/1066447), which is available for iOS and Android devices. Google Authenticator implements two-step verification services using the Time-based One-Time Password (TOTP) algorithm and HMAC-based One-time Password Algorithm (HOTP) for authentication.

<AccordionGroup>
  <Accordion title="Configure MFA for Your Account">
    Before you set up MFA for your account, you must install the Authenticator app on your device.

    **To configure MFA for your account**

    1. At the bottom of the expanded pane of the USM Central web user interface (UI), hover over the <img src="https://mintcdn.com/levelblue-5324744e/cXQBEU4dvbfLKeHt/images/usm-central/user-gray.svg?fit=max&auto=format&n=cXQBEU4dvbfLKeHt&q=85&s=68f0f9b51349c4c012407919f0a160b8" className="inline m-0" width="18" height="20" data-path="images/usm-central/user-gray.svg" /> icon and select **Profile**.
    2. Click **Enable Multi-Factor Authentication**.

       The pane expands to provide a unique QR code that is used by the Authenticator app to retrieve a verification code. The code is emailed to you as well.

           <Frame>
             <img src="https://mintcdn.com/levelblue-5324744e/jQPcuDOyVbjBzeJd/images/usm-central/mfa-user_thumb_0_60.webp?fit=max&auto=format&n=jQPcuDOyVbjBzeJd&q=85&s=cda30d4f09985f7dde95b6db2a945667" alt="" width="65" height="60" data-path="images/usm-central/mfa-user_thumb_0_60.webp" />
           </Frame>
    3. Open the Authenticator app on your device.
    4. Scan the QR code using the Authenticator app.
    5. Click **Save**.
    6. Hover over the <img src="https://mintcdn.com/levelblue-5324744e/cXQBEU4dvbfLKeHt/images/usm-central/user-gray.svg?fit=max&auto=format&n=cXQBEU4dvbfLKeHt&q=85&s=68f0f9b51349c4c012407919f0a160b8" className="inline m-0" width="18" height="20" data-path="images/usm-central/user-gray.svg" /> icon and select **Logout**.
    7. Click **Login**.
    8. On the login page, enter your user account and password, and click **Login**.
    9. Enter the one-time passcode in the text box of USM Central, and then click **Login**.
  </Accordion>

  <Accordion title="Change Your Authentication Device">
    If you lose or change your mobile device or need to have your MFA reset, please contact [LevelBlue Technical Support](https://levelblue.com/support).
  </Accordion>
</AccordionGroup>