Setup MFA to AWS root account

Rakeshkumar Taninki
aws security
Published in
3 min readOct 28, 2019

--

To setup MFA you must have an AWS account. Log in to the AWS account using your credentials and follow the below tutorial.

Step 1:

After login to AWS console, search for IAM service from the top services drop-down search box and select IAM.

AWS Services drop-down screen

Step 2: Click on Activate MFA on your root account tab and click manage MFA.

IAM service screen

Step 3: Click on the Multi-factor authentication tab and select Activate MFA.

Step 4: Select the Virtual MFA device option to add your app(Google authenticator/Microsoft authenticator) based TOTPs. If you have any other devices for the TOTP generation you can select the others as well and click on continue.

Step 5: Before step 4, download Google authenticator or Microsoft authenticator to your phone or laptop. Click here to download Google authenticator from the play store. Install the app and open to add your AWS account for 2 step-verification.

Now go to your AWS screen to scan QR code using your authenticator app.

Scan your screen’s QR code using the authenticator app

Step 5: After scanning the QR code, your authenticator app will start generating 6 digits OTP. We need to add two successive 6 digits OTP to below input boxes MFA Code 1 and MFA Code 2 to add MFA to your AWS account.

Click on Assign MFA after giving MFA Code 1 and 2. That's it, you have added 2FA for your AWS account.

Now, try log-out and log-in again to check the 2FA, after submitting the password, it will ask for 6 digits OTP, which you need to provide it from the App which you have configured before.

OTP screen after submitting the password

Make sure you must provide a valid 6 digit code from your configured device’s app to log in.

--

--