OpenSearch & MFA

OpenSearch has a new console. To comply with risk control policies and enhance the security of your applications, you are required to enter a verification code for certain modifications, such as offline changes and updates to intervention dictionaries. The prompt is shown in the following figure:

If multiple users share an Alibaba Cloud account, we recommend that you use multi-factor authentication (MFA). The following figure shows the Settings interface:

https://account.console.aliyun.com/?spm=5176.15104540.top-nav.dss.7698cc02bORUGE#/secure

Once enabled, authentication works as follows:

The following sections describe MFA and how to use it.

Multi-factor authentication (MFA) is a simple and effective security best practice. It adds an extra layer of protection on top of your username and password.

When you enable MFA, you must provide two factors to log on to the Alibaba Cloud console. You first enter your username and password (the first security factor). Then, you enter a dynamic password from your MFA device (the second security factor). This two-factor authentication provides greater security for your account.

MFA devices can be hardware-based or software-based. Alibaba Cloud currently supports software-based virtual MFA devices.

You can download the Alibaba Cloud App by visiting the official Alibaba Cloud website and scanning the QR code.

The following table lists the compatible applications for different smartphones:

For more information, see Enable multi-factor authentication for an Alibaba Cloud account and Disable multi-factor authentication for an Alibaba Cloud account.