导航|地址|刷新
Set-up 2FA

Skip to contentDocumentation Index
Fetch the complete documentation index at: https://developers.cloudflare.com/learning-paths/llms.txt
Use this file to discover all available pages before exploring further.



DocsDirectoryAPISDKsChangelog

Search

Log in






Application Security (Learning Paths)

/





Account security


Overview

Set-up 2FA

Add and manage other members

Review active sessions

Review audit logs - v1

Audit Logs - v2 ↗Beta






Default traffic security


Overview

DDoS Protection

Browser Integrity

DNSSEC

SSL / TLS

Mutual TLS (mTLS)






Web Application Firewall


Overview

Managed Rules

Custom rules






Rate Limiting


Overview

Features

Use cases

Configurations






Lists


Overview

Features

Use cases

Configurations






Security Center


Overview

Security Insights

Brand Protection






Agent resources


Agent setup ↗

Cloudflare Skills ↗

Code Mode MCP Server ↗

Domain-specific MCP Servers ↗MCP

Learning Paths llms.txt ↗

Learning Paths llms-full.txt ↗

Cloudflare Docs llms.txt ↗

Cloudflare Docs llms-full.txt ↗













Home

/Learning Paths

/…
Application Security


/Account security

/Set-up 2FA



Set-up 2FA


Last updated Apr 23, 2026|Copy as Markdown|View as Markdown|Agent setup

OverviewEnable 2FAAdditional configurations




Two-factor authentication (2FA) allows user account owners to add an additional layer of login security to Cloudflare accounts. This additional authentication step requires you to provide both something you know, such as a Cloudflare password, and something you have, such as an authentication code from a mobile device.


Note


Cloudflare user accounts configured to use single sign-on (SSO) cannot configure 2FA.



Cloudflare offers the option to use either a phishing-resistant security key, like a YubiKey, or a Time-Based One-Time password (TOTP) mobile app for authentication, like Google Authenticator, or both. If you add both of these authentication methods to your account, you are initially prompted to log in with the security key, but can opt-out and use TOTP instead.

To ensure that you can securely access your account even without your mobile device or security keys, Cloudflare also provides backup codes for download.


Tip


After downloading your backup codes, we recommend saving them in a secure location.



As the user account owner, you are automatically assigned the Super Administrator role. Once 2FA is enabled, all Cloudflare account members are required to configure 2FA on their mobile devices.

------


Enable 2FA


We recommend that all Cloudflare user account holders enable two-factor authentication (2FA) to keep your accounts secure. 

2FA can only be enabled successfully on an account with a verified email address. If you do not verify your email address first, you may lock yourself out of your account.


Caution


Super Administrators can turn on 2FA Enforcement to require all members to enable 2FA. If you are not a Super Administrator, you will be forced to turn on 2FA prior to accepting the invitation to join a Cloudflare account as a member.



To enable two-factor authentication for your Cloudflare login:

Log in to the Cloudflare dashboard ↗.

Under the My Profile dropdown, select My Profile.

Select Authentication. 

Select Add next to Mobile App Authentication or Security Key Authentication, or Enable next to Email Authentication.


Note


Cloudflare recommends that users enable at least two different 2FA factors, as well as safely store backup codes) to prevent lockouts.




Additional configurations


Cloudflare also supports 2FA with device built-in authenticators (Apple Touch ID, Android fingerprint, or Windows Hello), Yubikeys and TOTP mobile applications.


PreviousOverviewNextAdd and manage other members


Was this helpful?

YesNo

Edit pageReport issue




On this page

Overview

Enable 2FA

Additional configurations


Edit pageReport issue














Getting started
PlansContact salesPartnersFind a partnerStartupsUnder attack?Domain name search


Company
AboutCareersInvestorsPressPress kitGlobal network




Public interest
Project GalileoAthenian ProjectCloudflare for CampaignsProject FairshotImpact/ESG


Compliance
Compliance resourcesTrust HubData ProtectionResponsible AITransparency reportReport abuse




Resources
App innovation reportCloudflare RadarCase studiesStatusSupportEventsBlog


Developers
DocumentationLearning centerCommunity




Solutions
SSE and SASE platformCloudflare AI CloudAI SecurityFrontend Development PlatformMulti-Tenant Platform DevelopmentWeb Security Platform


Start BuildingLog In












© 2026 Cloudflare, Inc.

Privacy policy|Report security issues|Terms of use|Trademark
|
Your privacy choices








Docs




------
导航页 打开网址