# Using Multifactor Authentication (MFA)

To enable multifactor authentication (MFA) for your user in vStor, click your username on the topbar and select **Enroll in Multifactor Authentication** from the dropdown menu.

<figure><img src="https://428812014-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FGMeBpYM7NrE7ji2NbzSn%2Fuploads%2FtrGiseVFscXeNNAmnnMi%2Ftopbar%20-%20admin%20dropdown.png?alt=media&#x26;token=34cd308d-8c84-4664-8016-ca1152826d88" alt="" width="419"><figcaption></figcaption></figure>

You can use one of the two MFA methods:

* Authentication app (like Microsoft Authenticator)
* One-time e-mail password

{% hint style="warning" %} <mark style="color:orange;">**Attention!**</mark> E-mail password authentication cannot be recovered. We recommend you use an authentication app.
{% endhint %}

## Enabling MFA with an authentication app

Select **Authentication app** as the authentication method. Click **Next**.

<figure><img src="https://428812014-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FGMeBpYM7NrE7ji2NbzSn%2Fuploads%2FUdHGG3LNw5XQ5SL8ET4O%2Fmfa-app.png?alt=media&#x26;token=ea76b5d8-38a6-445f-8314-ffef924c533e" alt=""><figcaption></figcaption></figure>

To connect an authentication app to vStor, scan the QR code or manually enter the code and click **Next**.

<figure><img src="https://428812014-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FGMeBpYM7NrE7ji2NbzSn%2Fuploads%2FxXb3IIBac6Kw8uoI0cyA%2Fmfa-app-verification_code.png?alt=media&#x26;token=bc245f93-b802-457e-bb21-6862dbcdbc3b" alt=""><figcaption></figcaption></figure>

Once you verify your app, you will receive a list of recovery codes that you should store in a secure location.\
The **Finish** button will be disabled until you copy or download the recovery codes.

<figure><img src="https://428812014-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FGMeBpYM7NrE7ji2NbzSn%2Fuploads%2FYplHNNLp5vTzCiJYOPrv%2Fmfa-app-recovery_codes.png?alt=media&#x26;token=5597e92a-a04d-4b3c-905c-8d0b7a052078" alt=""><figcaption></figcaption></figure>

{% hint style="info" %} <mark style="color:blue;">**Note.**</mark> Once MFA is enabled, username and password authentication for the REST API will no longer be available. Use generated API keys for authentication instead. For more details, see [Using vStor API Keys with Catalogic DPX](https://docs.catalogicsoftware.com/vstor-4.13/basic-configuration/adding-catalogic-vstor-node-to-catalogic-dpx/using-vstor-api-keys-with-catalogic-dpx).
{% endhint %}

## Enabling MFA with one-time e-mail password

{% hint style="info" %} <mark style="color:blue;">**Note.**</mark> This option may be unavailable if the administrator has disabled authentication with one-time e-mail password. See [Selecting Allowed Authentication Methods](https://docs.catalogicsoftware.com/vstor-4.13/managing-vstor-user-accounts#selecting-allowed-authentication-methods).
{% endhint %}

Select **One-time e-mail password** as the authentication method. Click **Next**.

<figure><img src="https://428812014-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FGMeBpYM7NrE7ji2NbzSn%2Fuploads%2FSKwNgauMcP3obUthCz6x%2Fmfa-mail.png?alt=media&#x26;token=b7abe5d0-6276-455e-bdae-4ef476682b5f" alt=""><figcaption></figcaption></figure>

{% hint style="warning" %} <mark style="color:orange;">**Important.**</mark>  To add your e-mail as a multifactor authentication method, you need to have your e-mail configured in the user settings. See [Assigning an E-mail to a vStor Account](https://docs.catalogicsoftware.com/vstor-4.13/advanced-configuration/assigning-an-e-mail-to-the-vstor-account).
{% endhint %}

Enter the verification code you have been sent to the configured e-mail address. Click **Next**.

<figure><img src="https://428812014-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FGMeBpYM7NrE7ji2NbzSn%2Fuploads%2FqFmqdF35ZQv5cMGyBQuo%2Fmfa-mail-verification_code.png?alt=media&#x26;token=6a733204-8044-4a22-bf7e-bc146c0620a4" alt=""><figcaption></figcaption></figure>

Once you verify your e-mail address, you will receive a list of recovery codes that you should store in a secure location.\
The **Finish** button will be disabled until you copy or download the recovery codes.

<figure><img src="https://428812014-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FGMeBpYM7NrE7ji2NbzSn%2Fuploads%2FQng22WMyLaFKRX3B1x8a%2Fmfa-mail-recovery_codes.png?alt=media&#x26;token=4f519bec-8f3c-444b-9c32-0d449ef00b64" alt=""><figcaption></figcaption></figure>

{% hint style="info" %} <mark style="color:blue;">**Note.**</mark> Once MFA is enabled, username and password authentication for the REST API will no longer be available. Use generated API keys for authentication instead. For more details, see [Using vStor API Keys with Catalogic DPX](https://docs.catalogicsoftware.com/vstor-4.13/basic-configuration/adding-catalogic-vstor-node-to-catalogic-dpx/using-vstor-api-keys-with-catalogic-dpx).
{% endhint %}

## Disabling Multifactor Authentication

If you want to disable MFA for your vStor user, click your username on the topbar and select **Disable multifactor authentication** from the dropdown menu:

<figure><img src="https://428812014-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FGMeBpYM7NrE7ji2NbzSn%2Fuploads%2F99d35adT6dg1HgXJiNzN%2Ftopbar%20-%20admin%20dropdown%20-%20disable%20mfa.png?alt=media&#x26;token=cc7d326d-3aca-4a49-a8bb-37fb64641554" alt="" width="419"><figcaption></figcaption></figure>

Now, provide your vStor password and the verification code generated by your authentication app or sent to you by e-mail. Click **Disable MFA** to disable multifactor authentication for your user account:

<figure><img src="https://428812014-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FGMeBpYM7NrE7ji2NbzSn%2Fuploads%2FOXkXIgyA3fQ0XT3Agiya%2Fmfa-disable_mfa_dialog.png?alt=media&#x26;token=e2219f32-42c9-49c6-a692-a4d1f88aa0fe" alt="" width="563"><figcaption></figcaption></figure>

Multifactor authentication is now disabled for this user.
