> ## Documentation Index
> Fetch the complete documentation index at: https://docs.goguardian.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Set Up Multi-Factor Authentication
> Understand how MFA works in GoGuardian products and how to generate a backup code for a locked-out user in GoGuardian Org Management.
Multi-factor authentication (MFA) requires users to verify their identity with two or more methods when signing in. GoGuardian supports two MFA methods: a six-digit code sent via email, and a backup code generated by an Org Management Super User.
MFA is required for all GoGuardian customers signing in via email and password for the following products:
* GoGuardian Admin
* GoGuardian Beacon
* Fleet
* GoGuardian Org Management
* GoGuardian Teacher
GoGuardian does not require MFA for single sign-on (SSO). Google, Clever, ClassLink, and RapidIdentity are exempt.
## Sign In with Email-Based MFA
When MFA is required, users enter their login credentials and then receive a six-digit code by email. Enter the six-digit code in the GoGuardian product to complete sign-in.
After entering the code, users can trust their device for 30 days. During that period, the code is not required to sign in.
## Generate a Backup Code for a Locked-Out User
Super Users can generate a backup code for a user who is locked out of their account. The code is valid for 10 minutes and can only be used once.
1. Go to **Org Management**.
2. {/* TECH-ACCURACY: Verify nav label — article says "Staff" but current portal may label this section "User Management" */} Click **Staff** in the navigation menu.
3. Click **Edit** on the affected user's account.
4. Click **Generate MFA Code** under **Product Roles**. A new window displays the code to share with the user.
5\. Verify the result: The backup code appears in a new window. Share it with the user so they can sign in.
## FAQ
**Is MFA optional?**
No. MFA is required for all users signing in via email and password.
**How long is the backup code valid?**
The backup code is valid for 10 minutes from the time it's generated and can only be used once.
**What if I didn't receive the MFA code?**
Check your inbox and spam folders. If the code still hasn't arrived, click **Resend** at the sign-in screen.
**Can I generate a backup code for my own account?**
No. Contact a Super User in Org Management to generate a backup code for your account.
**How do I get help from GoGuardian Support?**
Submit a support ticket with the affected user's email address, a description of what they're seeing, and a screenshot if applicable.