---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Using MFA

# Using Multi-factor authentication {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read  
Learn how to use multi-factor authentication tools to securely access your instance.

## Log in with MFA {#mfa-use__section_pm3_k34_dpb}

ServiceNow requires authenticator applications that support time-based one-time passwords (TOTP). ServiceNow tests MFA with the following authenticators:

* Google Authenticator
* Microsoft Authenticator
* LastPass Authenticator
* Authy
* FreeOTP
* Duo
* Okta Verify

{#mfa-use__ul_dgx_rm3_zhb}  
Note:  
* Other authenticators not listed might also be compatible, but are not tested by ServiceNow.
* For information related to browser specific behavior change, see this [KB article](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0998122).
{#mfa-use__ul_wxh_y2s_pcc}

## Register an authentication app {#mfa-use__section_arv_vms_3dc}

|-|-|
| Authenticator App :   You can use authenticator apps to use a second factor of authentication. | If your administrator has enabled multi-factor authentication (MFA) on your instance, you are prompted for a second authentication after entering your user name and password. For details on the MFA login process, see [Log in with Multi-factor Authentication](https://www.servicenow.com/docs/OTXBG2s1yKF9qdmO_wxJZg "Log in with MFA when it is enabled by your administrator on your instance."). |
| Validation with Authenticator app :   Enter the code displayed on your authenticator app to log in. | If you haven't configured a second form of authentication, you will see a configuration page after logging in to guide you through the process of setting up an authentication app. For details on this setup, see [Set up multi-factor authentication for the first time](https://www.servicenow.com/docs/T3XssmQLqg1FYoTdVVIcxQ "If your administrator enabled MFA on your profile but you have not yet set up the application, you can set it up on login."). |
[ ]

{#mfa-use__table_g22_2j4_dpb}

## Register an authentication device {#mfa-use__section_pyc_yj4_dpb}

|-|-|
| After you've configured an authentication app, you can register other methods for authentication. Biometric authenticators :   You can use biometric authenticators like fingerprint or facial recognition as your second MFA authentication. If your administrator allows this option, you can configure biometric authenticators using the steps in [Register a biometric authenticator](https://www.servicenow.com/docs/nyOVYdie9MSjdJLPUNVWSQ "Register a biometric authenticator to use as part of your multi-factor authentication (MFA) login."). |   |
| Hardware key authenticators :   Hardware keys are physical security devices you can use for authentication. You can register a hardware device for use with your instance using the steps in [Register a hardware security key](https://www.servicenow.com/docs/Jb~ZUcY0zuiaIFn8hJWLlg "Register a hardware key to use as part of your multi-factor authentication (MFA) login."). | ![Hardware key icon]() |
| Validation with Biometric or Hardware Key :   Use the biometric or hardware key to log in. | Use the biometric or security key to log in. |
[ ]

{#mfa-use__table_qm1_zj4_dpb}

## Register a phone number for OTP {#mfa-use__section_ilx_bwb_2vb}

|-|-|
| SMS :   Use SMS-based OTP to require users who attempt to log in. | When users attempt to log in to ServiceNow, SMS OTP is sent to the mobile number associated with the sys_user record. Users can enter the six-digit verification code that it sent to the mobile device and verify their identity. <br /> ![SMS.]() |
| Validation with SMS :   Use the validation with SMS to log in based on the OTP generated. | You need to enter the 6-digit code sent to the mobile number to log in. The code sent is valid for the next 5 minutes. You can use resend code to again send the code. |
[ ]

{#mfa-use__table_bjc_2wb_2vb}

## Register an email address for OTP {#mfa-use__section_clt_zvb_2vb}

|-|-|
| Email address :   Use email-based OTP to require users who attempt to log in. | When users attempt to log in to ServiceNow, Email OTP is sent to the email address associated to the user. Users can enter the six-digit verification code that it sent to the mobile device and verify their identity. <br /> ![Email.]() |
| Validation with Email :   Use the validation with Email to log in based on the OTP generated. | You need to enter the 6-digit code sent to the email address to log in. The code sent is valid for the next 5 minutes. You can use resend code to again send the code. |
[ ]

{#mfa-use__table_xwx_dwb_2vb}