Skip to main content

Multi-Factor Authentication (MFA)

Each time an administrator logs in or performs sensitive operations, they need to enter not only their username and password but also a dynamic verification code or one-time password (OTP) from Multi-Factor Authentication (MFA), adding an extra layer of security. The system verifies two layers of security factors:

  • First layer of security: Enter the username and password.
  • Second layer of security: Enter the dynamic verification code generated by a virtual MFA device or received via email.
  • Notes:
    • Virtual MFA: The Time-based One-Time Password (TOTP) algorithm is a widely adopted MFA protocol. Applications supporting TOTP (e.g., Google Authenticator, Microsoft Authenticator) on mobile or other devices are referred to as virtual MFA devices. If a user enables a virtual MFA device, PigCloud will require the user to enter the 6-digit dynamic verification code generated by the app during login to prevent unauthorized access due to stolen passwords.

The PigCloud console supports the following MFA methods:

Authentication Method


Google Authenticator OTP


Email Verification Code