Does Atlas support multi-factor authentication (MFA)?
- Topic
- Security & compliance
- Asked by
- Developers and security teams
Atlas has full MFA support:
TOTP — standard authenticator-app codes (Google Authenticator, 1Password, Authy, etc.).
Recovery / backup codes — one-time codes for when a device is lost.
Passkey second factors — WebAuthn as a second factor.
Per-session freeze — repeated failed factor attempts freeze that session rather than letting an attacker grind.
Step-up authentication — Atlas can require re-verification before a sensitive action, enforced by the server on every path, including OAuth.
Adaptive MFA — challenge only when signals (new device, unusual location) indicate risk, so low-risk sign-ins stay frictionless.
Configure MFA policy in the dashboard; see the MFA guide.
Yes — TOTP authenticator apps, recovery/backup codes and passkey second factors, with per-session freeze on repeated failures and step-up on sensitive paths. Adaptive MFA can require a factor only when risk warrants it.