Multi-Factor Authentication — WorkOS
Your app. Your rules. Secure by design.
Read the MFA Getting Started Guide
Multi-Factor Authentication
Your app’s architecture for advanced security
TOTP
Time-based One-Time Password supported
SMS
Phone number passcodes enabled
Frictionless integration. Compatible with your needs.
With a few API calls, you can integrate MFA into an existing application, regardless of the authentication layer or session management strategy.
Enroll, activate, and verify authentication factors
A composable, unopinionated set of endpoints that can be integrated into an existing application.
Node.js Ruby Python Go PHP Java .NET cURL
Stay in control of the user journey
Choose between enforcing MFA for all users or making it an opt-in configuration.
Customizable templates
Tailor the SMS message delivered to your users to fit your app and brand.
Flexible authentication flows
Allow users to configure both TOTP and SMS verification using the same API interface.
Support authenticator apps for an extra layer of security
Enforce additional security measures by asking users to prove possession of their device using apps like 1Password, Google Authenticator, and Duo.
Restrict access to sensitive resources with re-verification
Require users to verify their identity with a stronger authentication mechanism when accessing restricted resources or performing sensitive actions.
“When I asked the team, how was the experience with WorkOS? They were just like, this is incredible.”
Sam Lambert
CEO
Add Multi-Factor Auth to your app today
Integrate MFA to your app to ensure that you support the latest authentication security protocols.
MFA Quick Start
Jump into the docs and start building in minutes. MFA Product Overview
Watch this overview of the MFA API and how to get started. MFA Starting Guide
Learn how to secure your app with TOTP and SMS verification.