Skip to main content
Question

Two factor Authentication is set up, but I am able to log in without it

  • January 1, 2026
  • 3 replies
  • 23 views
M

My accountant is requiring me to set up 2FA. I have tried setting it up using both the SMS option and the Authenticator app option. I have followed all the steps and saved the changes. Yet when I log out and log back in, it’s letting me right into Box - it’s not requiring 2FA. Usually I use Chrome as my browser, but I decided to try Safari and only the first time did it require me to use the authenticator app. After that it let me in without it. I tried deleting cookies, etc. but it still is not requiring 2FA.

    3 replies

    R

    My accountant requires me to set up two-factor authentication (2FA), but I’m running into an issue where it isn’t being enforced. I’ve tried enabling both the SMS  VA E-ZPass  and authenticator app options, followed all the setup steps, and saved the changes successfully. However, when I log out and log back in, Box lets me in without prompting for 2FA. I usually use Chrome, but I also tested Safari

    J
    • Jill
    • Community Manager
    • January 2, 2026

    Hi ​@Majad,

     

    Welcome to Box Community, and we’re glad to assist!

    It seems that you have created 2fa on your account. If you are unable to login to your account please contact Box Support with your affected Box account and use this link. 

    The link provided will allow you to open a ticket if you have trouble signing in. 

     

    Thanks for posting! 

    J
    • Jill
    • Community Manager
    • January 2, 2026

    Hi ​@robin85buckly,

     

    Welcome to Box Community, and we’re glad to assist!

    To enable authentication app multi-factor authentication for your individual account:

    1. Go to Account Settings > Account.
    2. In the 2-Step Verification section, click Set Up. (Note: You will not see this section if your organization uses single sign-on (SSO) for authentication.)
    3. Select Authentication App (recommended) and click Next.
    4. Open the authentication app on your phone and scan the QR code. (You can also enter the secret key located under the QR code into the authenticator app manually.)
    5. Enter the code you received in the authenticator app and click Submit.
    6. Enter a phone number for verification, which would be used by Box support to verify your identity in the case where you are not able to authenticate in the app, and click Submit.
    7. Copy the backup codes. Once copied, paste them into a file only you have access to and save the file somewhere secure. 
    8. Click Complete.

    To enable email multi-factor authentication for your individual account:

    1. Go to Account Settings > Account. 
    2. In the 2-Step Verification section, click Set Up.
    3. Click Set Up.
    4. Select Email and click Next.
      • The following window confirms you’ll use email MFA to sign in. Click Submit to continue.
    5. Select the email you’d like to use for the Box login.
    6. Enter the code sent to the email you selected for MFA.

    After setting up MFA with your email, you're notified that email MFA is required the next time you login.

     

    To enable SMS multi-factor authentication for your individual account:

    Note

    Your Box administrator may not allow SMS as an authentication method. If so, this option will not be available to you.

    1. Go to Account Settings > Account.
    2. In the 2-Step Verification section, click Set Up.
    3. Select SMS Text Message and click Next.
    4. Enter your phone number and click Continue. Some countries do not support 2FA via SMS.
    5. Enter the code you received as a text message and click Submit.
    6. Copy the backup codes. Once copied, paste them into a file only you have access to and save the file somewhere secure.
    7. Click Complete.

    Thanks for posting! 

    Terms & ConditionsAccessibility statement