> ## Documentation Index > Fetch the complete documentation index at: https://levelblue-final.mintlify.site/llms.txt > Use this file to discover all available pages before exploring further. # Using Multifactor Authentication | | | | | | | - | - | - | - | - | | **Role Availability** | **Read-Only** | **Investigator** | **Analyst** | **Manager** | To protect your USM Anywhere account, enable multifactor authentication (MFA) (A method of access control in which a user is granted access only after successfully presenting several separate pieces of evidence to an authentication mechanism – typically at least two of the following categories: knowledge, possession, and inherence.). MFA adds extra security because it requires multiple factors to authenticate (Process used to verify the identity of a user, user device, or other entity, usually through a username and password.) a user, making it more difficult for an unauthorized person to gain access to the account. In USM Anywhere, MFA provides a layered defense of two independent credentials: what you know (your username and password) and what you have (security token on your personal device). To use multifactor authentication in USM Anywhere, you must have a mobile device that supports an Authenticator app. LevelBlue recommends the [Google Authenticator app](https://support.google.com/accounts/answer/1066447), which is available for iOS and Android devices. Google Authenticator implements two-step verification services using the Time-Based One-Time Password (TOTP) algorithm and HMAC-Based One-Time Password (HOTP) algorithm for authentication. > [accordion] Configuring MFA for Your Account > > Before you set up MFA for your account, you must install the Authenticator app on your device. > > **To configure MFA for your account** > > 1. In the lower-left corner of the USM Anywhere web user interface (UI), click the ![](https://mintcdn.com/levelblue-final/5CO-AvNLSpisHL76/images/usm-anywhere/user.svg?fit=max\&auto=format\&n=5CO-AvNLSpisHL76\&q=85\&s=ada02aad9636106767cd1a9aafbeccaa) icon, and then select **Profile Settings**. > > 2. Select Enable **Multi-Factor Authentication**, and then click **Save**. > > ![](https://mintcdn.com/levelblue-final/N6pTsZP9q3p7qLdi/images/usm-anywhere/mfa-enable_thumb_0_60.webp?fit=max\&auto=format\&n=N6pTsZP9q3p7qLdi\&q=85\&s=fbcc9285d186c676c6440d00a7aca1db) > > 3. Click the ![](https://mintcdn.com/levelblue-final/5CO-AvNLSpisHL76/images/usm-anywhere/user.svg?fit=max\&auto=format\&n=5CO-AvNLSpisHL76\&q=85\&s=ada02aad9636106767cd1a9aafbeccaa) icon, and then select **Logout**. > > 4. Click **Login**. > > 5. On the login page, enter your username and password, and then click **Login**. > > USM Anywhere displays the Multi-factor authentication page to prompt you to complete your MFA configuration. The displayed page provides a unique QR code that is used by the Authenticator app to retrieve a verification code. > > ![](https://mintcdn.com/levelblue-final/N6pTsZP9q3p7qLdi/images/usm-anywhere/mfa-qr-code-new_thumb_0_60.webp?fit=max\&auto=format\&n=N6pTsZP9q3p7qLdi\&q=85\&s=24abee55f8e7d1cd96a12e177fb8138b) > > 6. Open the Authenticator app on your device. > > 7. Scan the QR code using the Authenticator app. > > 8. Enter the one-time passcode in the text box of the USM Anywhere, and then click **Verify Code and Login**. > [accordion] Activating Required MFA > > Users in a manager role can require non-admin users to log in using MFA. If a manager user enables this setting and you do not already have MFA configured, you will be prompted to set up MFA upon your next log in. > > Before you set up MFA for your account, you must install the Authenticator app on your device. > > **To activate required MFA** > > 1. On the login page, enter your username and password, and then click **Login**. > > USM Anywhere displays the Multi-factor authentication page to prompt you to complete your MFA configuration. The displayed page provides a unique QR code that is used by the Authenticator app to retrieve a verification code. > > ![](https://mintcdn.com/levelblue-final/N6pTsZP9q3p7qLdi/images/usm-anywhere/mfa-qr-code-new_thumb_0_60.webp?fit=max\&auto=format\&n=N6pTsZP9q3p7qLdi\&q=85\&s=24abee55f8e7d1cd96a12e177fb8138b) > > 2. Open the Authenticator app on your device. > > 3. Scan the QR code using the Authenticator app. > > 4. Enter the one-time passcode in the text box of the USM Anywhere, and then click **Verify Code and Login**. > [accordion] Changing Your Authentication Device > > In the event that you lose or change your mobile device, there is a function to reset the MFA for your user account. Another user in your USM Anywhere environment can edit your user account to reset the QR code used to pair the device with your account. > > **To change your authentication device** > > 1. Go to **Settings > Users**. > > 2. Click the ![](https://mintcdn.com/levelblue-final/SPmy2LqqTlJThUf-/images/usm-anywhere/pencil-new.svg?fit=max\&auto=format\&n=SPmy2LqqTlJThUf-\&q=85\&s=165bba93fb785be56053c468fb2a06fa) icon of the user for whom you want to reset the MFA account. Your role must be Manager. > > 3. Click **Reset Multi-Factor Authentication**. > > ![](https://mintcdn.com/levelblue-final/N6pTsZP9q3p7qLdi/images/usm-anywhere/mfareset_thumb_0_60.webp?fit=max\&auto=format\&n=N6pTsZP9q3p7qLdi\&q=85\&s=d3c6c47d2c5681a08177412670670942) > > A message displays at the top of the page to inform you about the success of the MFA reset request. > > 4. Click **Cancel**. > After the reset, USM Anywhere displays the Multi-factor authentication page at your next login (Log in (verb): Process in which an individual gains access to a computer system after providing sufficient credentials to authenticate their unique identity. Login (noun): User credentials, typically a username and matching password.). Follow the same steps to set up the authentication with the new device. ## ![](https://mintcdn.com/levelblue-final/5CO-AvNLSpisHL76/images/usm-anywhere/vid.svg?fit=max\&auto=format\&n=5CO-AvNLSpisHL76\&q=85\&s=87b2744f94ab678323a0e174eccd95d4) Related Video Content [https://player.vimeo.com/video/318615849](https://player.vimeo.com/video/318615849) To view other related training videos, [click here](https://cybersecurity.att.com/training/self-paced-training).