How to use Multifactor Authentication (MFA)

You can enable multifactor authentication on your Scaleway account for heightened security. Once enabled, an additional security code generated by your phone is required to access your account.

Multifactor authentication provides extra layers of security. In addition to your password (the first factor), other factors (such as an MFA app) are required to access your account. Even in the event of a leaked password, your account is protected.

Before you startLink to this anchor

To complete the actions presented below, you must have:

• A Scaleway account logged into the console

How to download an MFA appLink to this anchor

To use multifactor authentication on your account, you first need to download an MFA app onto your smartphone. Once configured, MFA apps display a constantly rotating set of codes to use with your different accounts when you are prompted for one during login. Popular MFA apps include:

• Authy
• FreeOTP
• Google Authenticator

Download the app of your choice and install it onto your smartphone.

How to enable MFALink to this anchor

1. Click your Organization name on the top-right corner of the console navigation menu, click Profile, then Security.
   Important

   If you are logged in as an IAM Member, Click Profile, then Credentials and scroll down to the Multifactor authentication section.

2. Click Enable MFA, in the Multifactor authentication section. A pop-up displays.
3. Enter the code shown on the pop-up into your MFA app, or scan the QR code into your app. Your app sets up MFA for your Scaleway account and displays a 6-digit code.
4. Enter the 6-digit authentication code given by your app into the pop-up box, then click Submit. A pop-up displays.
5. Download or copy the backup codes shown, and save them in a safe place. These codes will be the only way to regain access to your account without your MFA app.

MFA is now enabled on your account.

Next time you log in to your Scaleway account, you will be prompted for an MFA code. Use your MFA app to get the code and enter it in the Scaleway console.

How to update MFALink to this anchor

If you no longer have access to the device in which you set up your MFA, you can update your MFA information and set it up via the Scaleway console.

Before you startLink to this anchor

To complete the actions presented below, you must have:

• A Scaleway account logged into the console
• Owner status or IAM permissions allowing you to perform actions in the intended Organization
• Enabled MFA on your account

1. Access the Security tab of your User Account page. Alternatively, click your Organization name on the top-right corner of the console navigation menu, click Profile, then Security.
2. Click Update MFA, in the Multifactor authentication section. A pop-up displays.
3. Enter the code shown on the pop-up into your MFA app, or scan the QR code into your app. Your app sets up MFA for your Scaleway account and displays a 6-digit code.
4. Enter the 6-digit code given by your app into the pop-up box, and click Submit. A pop-up displays.
5. Download or copy the backup codes shown, and save them in a safe place. These codes will be the only way to regain access to your account without your MFA app.

How to disable MFALink to this anchor

1. Access the Security tab of your User Account page. Alternatively, click your Organization name on the top-right corner of the console navigation menu, click Profile, then Security.
2. Click Disable MFA, in the Multifactor authentication section. A pop-up displays.
3. Type DISABLE in the box to confirm, then click Disable.

MFA is now disabled on your account.

How to regain access to your accountLink to this anchor

If you lose your MFA deviceLink to this anchor

If you lose your authentication device, you can regain access to your account using the backup codes that were generated when you enabled MFA.

When you log into your account, you are prompted for an MFA code.

Enter one of your backup codes instead of a code generated by your MFA device in real-time, then click Log in. You are logged into your account and can disable MFA if you wish.

If you lose your MFA device and backup codesLink to this anchor

If you lose both your MFA device and backup codes, you must go through a manual identity verification process to regain access to your account.

Contact our support team with the following information:

• Email address,
• Postal address,
• Two different documents proving your identity (passport or local ID card for individual accounts + certificate of incorporation for companies),
• A contact phone number,
• A copy of your last Scaleway invoice, or details about the amount charged if you do not have a copy,
• A card or bank statement showing your Scaleway invoice debit.

Once you have collected all this information, send it to document@scaleway.com.

Our team will then proceed with an identity verification to determine if you can regain access to your account.