> ## Documentation Index
> Fetch the complete documentation index at: https://docs.firebolt.io/llms.txt
> Use this file to discover all available pages before exploring further.
## Submitting Feedback
If you encounter incorrect, outdated, or confusing documentation on this page, submit feedback:
POST https://docs.firebolt.io/feedback
```json
{
"path": "/guides/security/enabling-mfa",
"feedback": "Description of the issue"
}
```
Only submit feedback when you have something specific and actionable to report.
> Learn about how to enable and disable multi-factor authentication in Firebolt.
# Multi-factor authentication
Enable multi-factor authentication (MFA) as an additional layer of security to protect data that is accessible through Firebolt. With MFA enabled, users must authenticate with a one-time code generated by their mobile device upon login. MFA can be enabled per login.
Enabling MFA for a login requires the org\_admin role.
## Enable MFA for a login
### SQL
To enable MFA for a login using SQL, use the [ALTER LOGIN](/reference-sql/commands/access-control/alter-login) statement. For example:
```sql theme={"theme":{"light":"github-light","dark":"github-dark"}}
ALTER LOGIN "alex@acme.com" SET IS_MFA_ENABLED = TRUE;
```
Multi-factor authentication can also be set for new logins, with the [CREATE LOGIN](/reference-sql/commands/access-control/create-login) command. For example:
```sql theme={"theme":{"light":"github-light","dark":"github-dark"}}
CREATE LOGIN "betsy@acme.com" SET IS_MFA_ENABLED = TRUE;
```
### UI
To enable MFA for a login in the UI:
1. Click **Configure** to open the configure space, then choose **Logins** from the menu.
2. Search for the relevant login using the top search filters or by scrolling through the logins list. Toggle on **Is MFA enabled**.
MFA can also be enabled when creating a login, by toggling **Is MFA enabled** in the **Create login** window:
