Docs Menu
Docs Home
MongoDB Cloud Manager

Manage Your Two-Factor Authentication Options

On this page

  • Configure Two-Factor Authentication
  • Generate New Recovery Codes
  • Reset Legacy Two Factor Authentication

Two-factor authentication provides a second layer of security for your Cloud Manager account.


Legacy 2FA is deprecated. If you currently have legacy 2FA enabled you can continue to use it, but it is recommended that you switch to multi-factor authentication. To use multi-factor authentication, disable legacy two-factor authentication and enable multi-factor authentication instead.


Google Authentication Uses Google 2-Step Verification

Google manages your 2FA. You can't use Cloud Manager two factor authentication and won't be prompted for a Cloud Manager 2FA verification when you log into Cloud Manager. Google should verify your identity using Google 2-Step Verification

Cloud Manager requires 2FA to help users control access to their Cloud Manager accounts.

To log into Cloud Manager, a user must provide their password ("something you know"), as well as a second time-sensitive verification code, delivered during authentication ("something you have"). By requiring both factors, Cloud Manager can grant authentication requests with a higher degree of confidence.

After you enter your username and password, you are prompted for a six-digit time-sensitive verification code. This code is sent to a separate device, such as a mobile phone or security token, that you can read and enter into Cloud Manager and complete your login.

Cloud Manager provides the following sources for 2FA verification codes:

A global team that shares the same Cloud Manager account can use Google Authenticator and use the same seed code for all team members. To generate a common seed code that all team members can use, select the Can't scan the barcode? link when Configuring Two-Factor Authentication with Google Authenticator.

As a backup, you can generate recovery codes to use in place of a sent code when you do not have access to a phone, 2FA app or 2FA device. Each recovery code is single-use, and you should save these codes in a secure place. When you generate new recovery codes, you invalidate previously generated ones.

  1. In Cloud Manager, click your username in the top-right corner and select Two-Factor Authentication.

  2. Click 2FA in the left navigation pane.


Click to the right of Two Factor Authentication.

When prompted for verification, enter a 2FA code then click Verify.


Each time you expand this box, Cloud Manager generates a new set of codes.

Keep the codes in a safe place. Each code can be used in conjunction with your username and password to not only access Cloud Manager but to reset your security settings on Cloud Manager.

If you have legacy 2FA enabled and you lose access to your 2FA device, you can reset 2FA for your account.

Because legacy 2FA is deprecated, you cannot re-establish it after you reset it. Instead, you can enable multi-factor authentication.


The following procedure resets legacy 2FA for your Cloud Manager account. To edit multi-factor authentication settings, see multi-factor authentication.

  1. Log in to Cloud Manager with your username and password.

  2. When the 2FA prompt displays:

    1. Click the Reset your two-factor authentication link.

    2. Click Cloud Manager user? Click here at the bottom of the Reset Two Factor Authentication modal.

  3. Type your Cloud Manager username.

  4. Click Reset Two Factor Authentication.

    Cloud Manager emails a link to the e-mail account associated with the Cloud Manager username.

  5. Check your email.

  6. Click the link that Cloud Manager sent to start the 2FA reset procedure.

  7. Follow the directions on the 2FA reset page. After completing the reset procedure, Cloud Manager allows you to log in to the Cloud Manager account without requiring a 2FA code.

← Set up Multi-Factor Authentication