How do I enable MFA in OpenSearch?-OpenSearch(Open Search)-阿里云帮助中心

Why does OpenSearch require MFA?

OpenSearch has a new console. To comply with risk control policies and enhance the security of your applications, you are required to enter a verification code for certain modifications, such as offline changes and updates to intervention dictionaries.

If multiple users share an Alibaba Cloud account, we recommend that you use multi-factor authentication (MFA).

What is MFA

Multi-factor authentication (MFA) is a simple and effective security best practice. It adds an extra layer of protection on top of your username and password.

When you enable MFA, you must provide two factors to log on to the Alibaba Cloud console. You first enter your username and password (the first security factor). Then, you enter a dynamic password from your MFA device (the second security factor). This two-factor authentication provides greater security for your account.

MFA devices can be hardware-based or software-based. Alibaba Cloud currently supports software-based virtual MFA devices.

You can download the Alibaba Cloud App by visiting the official Alibaba Cloud website and scanning the QR code.

The following table lists the compatible applications for different smartphones:

Phone Type	MFA Application Name
Android	Google Authenticator (Search for and download it from major app stores)
iPhone	Google Authenticator
Windows Phone	Authenticator
Blackberry	Google Authenticator

How to enable or disable MFA

For more information, see Enable multi-factor authentication for an Alibaba Cloud account and Disable multi-factor authentication for an Alibaba Cloud account.