May 27, 2025 — Security release notes¶
New authentication methods for multi-factor authentication (MFA) — General availability¶
Users enrolled in multi-factor authentication (MFA) enter their password, then use a second factor of authentication. With this release, these users can now use the following MFA methods as their second factor of authentication:
A passkey that can be stored in a variety of ways. For example, passkeys allow a user to authenticate with a hardware security key or by using their laptop fingerprint sensor.
A preferred authenticator app that generates a time-based one-time passcode (TOTP).
Administrators can restrict which MFA methods are available to users who are setting up their second factor of authentication.
To learn how to set up one of these MFA methods, see Configuring a second factor of authentication.