Is MFA available?

[michaelhays]

Question

Is Multi-Factor Authentication available for Vercel accounts? I couldn't find anywhere to enable that in the Vercel dashboard.

I'm working on a security review in preparation for a SOC 2 audit, and it would be helpful to provide evidence of this.

I see in the Vercel security page that "Multi-Factor Authentication" is listed, but I'm not sure if that implies the availability for Vercel user accounts.

[ben-bcn]

I am search for the same information for the same reason.

[amyegan]

You can use 2FA for your Git login connection (GitHub, GitLab, or Bitbucket). Logging in via email requires verification through your email as well, so using 2FA with your email login can add another layer of protection.

For Enterprise customers, we also have a sign-in via SSO feature available: vercel.com/docs/security/saml#authenticating-with-saml-sso

[michaelhays]

Thanks for the update! Yep that's what I'm currently doing -- 2FA on both GitHub and email.

MFA would still be much appreciated, if that's anywhere on the roadmap :)

[colincclark]

Seems like a reasonable request from quite a while ago. Why does Vercel not support MFA itself?

[swarnava]

We use Passwordless login. If you are login using your mailbox or Git provider, it should already contain MFA enabled.

[leerob]

We also support logging in with passkey! https://vercel.com/changelog/login-with-passkey-is-now-supported

[github-actions[bot]]

This discussion was automatically locked because the community moved to a new site. Please join us at vercel.community