Start authenticator enrollment
While signed in, open your avatar’s Settings → Advanced User Details and choose Connect beside App Registration: One-Time Password Authenticator. Complete any identity check shown.
If Salesforce requires setup as you sign in, choose Choose Another Verification Method if necessary, then select the option for verification codes from an authenticator app and continue.
Add Salesforce to Sign In
You can use Sign In, our authenticator app for codes on your iPhone.
- With the setup QR code on another screen, open Sign In and tap Add → Scan QR Code.
- Scan the code, review the account details, and tap Add Account.
- Enter the current six-digit code in Salesforce’s Verification Code field and choose Connect.
Choose I Can’t Scan the QR Code to reveal Salesforce’s Key for manual entry. This is useful for setup on the same iPhone. In Sign In, choose Add → Enter Setup Key, set Service to Salesforce and Account to your account name, paste the secret into Key, then tap Add Account. Keep this key private.
Other organization-approved methods
Salesforce supports security keys and built-in device authentication where enabled. Ask your administrator which methods your organization permits. A code delivered for an identity check is not necessarily an approved MFA method for regular sign-in.
Ask your administrator for recovery help
If your authenticator is unavailable, contact your Salesforce administrator. They can guide you through an approved recovery or authenticator-replacement process. Do not assume Salesforce issues a personal set of printable backup codes.
Retain your existing access until the replacement is confirmed.
If a code does not work
Make sure the Salesforce entry in Sign In matches the account you are using. Wait for a fresh code, then enter it before it changes. If fresh codes keep failing, check that your iPhone uses automatic date and time.
Keep a working sign-in session and your recovery information available while resolving the problem. Adding an entry to Sign In does not finish enrollment: the service must accept a code and confirm activation.