Multi-Mode MFA: Enabling More Than One MFA Method in Zoho

Multi-Mode MFA: Enabling More Than One MFA Method in Zoho

Multi-mode MFA lets you enable more than one MFA mode for your Zoho account, so a lost phone or an unavailable authenticator doesn't leave you locked out. Zoho offers four modes: OneAuth, SMS-based OTP, app-based OTP (authenticator apps), and Security key. Enabling multi-mode MFA requires configuring at least two of them.

SMS-based OTP is being phased out. Users who signed up after 1 January 2024 aren't offered SMS-based OTP as an MFA option at all, because it's vulnerable to phishing, SS7 attacks, and SIM swapping. If your account predates that, you may still have it, but don't rely on it as your only mode going forward.

Using an Alternate Mode When Your Primary One Isn't Available

If your primary MFA mode isn't to hand when you're signing in, you can switch to any other mode you've enabled instead.

If OneAuth Is Your Primary Mode

  1. Go to Zoho Accounts and enter your email address, then click Next.
  2. Enter your password and click Sign In. If you've enabled passwordless sign-in, click Sign in another way directly instead.
  3. Click Sign in another way, then Problem signing in?
  4. If you still have your mobile device, choose the corresponding MFA mode. If not, click Can't access your mobile device? and choose the option that applies.

If SMS-Based OTP, App-Based OTP, or Security Key Is Your Primary Mode

  1. Go to Zoho Accounts, enter your email address, click Next, then enter your password and click Sign In.
  2. Click Problem signing in?
  3. If you have access to your mobile device, choose the corresponding MFA mode. If not, click Can't access your mobile device? and choose the option that applies.

Deleting a Specific MFA Mode

  1. Sign in to your Zoho account.
  2. Click Multi-Factor Authentication.
  3. Click the delete icon next to the mode you want to remove, then click Confirm.
If you'd rather turn MFA off entirely rather than delete one mode, see disabling or re-enabling multi-factor authentication.
Need help? 1 Cloud Consultants can help you set up multi-mode MFA so a single lost device or unavailable app never locks you out. Book a discovery call with 1 Cloud Consultants.