> ## Documentation Index
> Fetch the complete documentation index at: https://docs.dynamic.xyz/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# MFA Overview

Multi-Factor Authentication (MFA) adds a layer of security to your app. MFA is structured as **enrollment** (users register a second factor) and **enforcement** (when it is required—at login and/or for specific actions like transactions).

> [!NOTE]
>
> Before implementing MFA in your application, configure MFA settings in the Dynamic Console. See [End-User MFA](https://docs.dynamic.xyz/docs/platform/console/end-user-mfa.md) for enrollment and enforcement (session-based and/or action-based), configuration options, and console setup.

> [!TIP]
>
> Users can use passkeys or TOTP devices for MFA — each guide covers both.

> [card] [MFA Enrollment](https://docs.dynamic.xyz/docs/javascript/authentication-methods/mfa/account-based.md)
>
> Learn how to implement MFA enrollment (registering a TOTP device or Passkey).

> [card] [Action-based enforcement](https://docs.dynamic.xyz/docs/javascript/authentication-methods/mfa/action-based.md)
>
> Learn how to implement action-based enforcement (MFA for sensitive actions).

> [card] [Step-up authentication](https://docs.dynamic.xyz/docs/javascript/authentication-methods/step-up-auth/overview.md)
>
> Step-up auth (the broader category) requires re-verification before sensitive actions; MFA is one way to satisfy it. This guide uses elevated access tokens.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.