Multi-factor Authentication in Auth0

Multi-factor authentication (MFA) provides a method to verify a user's identity by requiring them to provide more than one piece of identifying information. This ensures that only valid users can access their accounts even if they use a username and password that may have been compromised from a different application.

To enable MFA, go to Dashboard > Security > Multi-factor Auth, and toggle on the factors you want to enable on your tenants, such as push notifications or SMS.

Next, perform any further setup required to configure that factor, then choose whether you wish to force MFA all the time, never, or if Auth0 determines that a login is high risk. See Enable Adaptive MFA for details.

You can also customize your MFA flow with Auth0 rules to allow MFA to only be required in specific circumstances or force a particular factor to be used.

From Theory to Practice - Adding Two Factor Authentication to node.js
Announcing Auth0 Guardian Whitelabel SDK
Time-based One-Time Password (TOTP)
Auth0 Introduces Adaptive MFA

Enable MFA
MFA Factors
Customize MFA User Pages
MFA Developer Resources
Auth0 Guardian
Troubleshoot MFA Issues

Docs