How does Tencent Cloud bind virtual MFA devices to improve the security of Tencent cloud accounts

After Tencent Cloud buys a domain name, ECS or other cloud products, consider Tencent Cloud Account Security Question. In view of the complexity of various situations on the network, if we are afraid that our account will be stolen, virtual property loss will occur, or the business running on the purchased ECS is company business and commercial business, which is very important, we can add and bind virtual MFA devices for free to improve the security of Tencent's cloud account. In this article, Mr. Wei introduces in detail what a virtual MFA device is, and How does Tencent Cloud bind virtual MFA devices The operation process of.

Introduction to Virtual MFA Device

It is a simple and effective security method, which is to add a layer of security protection in addition to the login mode of user name and password. After binding, you can conduct secondary login verification through MFA.

The specific implementation method is: after MFA is enabled, when users log in to Tencent Cloud website, the system requires the first lock, that is, user name and password, and then requires the dynamic verification code from their MFA device, that is, the second lock. The security authentication method of the two locks provides higher security protection for your account.

At present, the official website of Tencent Cloud supports virtual MFA verification based on the Tencent Cloud Assistant applet, so that you can easily and safely log in to the Tencent Cloud account with your mobile phone.

Tencent Cloud Binding Virtual MFA Device

Click me to open After logging in to Tencent ECS, enter [Console] in the upper right corner of the page and click [Security Settings].

Find the bound MFA device on the right side of the basic settings. You can also find the same prompt in the login protection of account protection.

You need to use WeChat scanning to pass the authentication. If you do not bind WeChat, you can open WeChat login in the account information>login mode in the left list in the following figure.

Scan the QR code with WeChat, input two groups of verification codes generated by Tencent Cloud Assistant applet (see the second picture below for specific operation methods), check Enable login protection and operation protection, and submit.

The figure below is the first group of numbers generated by the Tencent Cloud Assistant applet on the mobile phone. Fill in the figure above. After 30 seconds, the system will generate the second group of numbers and fill in the figure above.

Click the gray pen head in the following figure, the options on the right will appear, which can be set as a common MFA device, or you can delete the current MFA device.

In this way, we added virtual MFA device verification to Tencent's cloud account. In the future, no matter login or sensitive operation, we need to verify the six digit dynamic verification code on the virtual MFA device. After checking, we can successfully enter. One exception is that if WeChat login is enabled, you only need to scan WeChat code to log in to Tencent Cloud account without secondary verification. However, sensitive operations still need secondary verification.

Virtual MFA device verifies Tencent cloud sensitive operations

Let's see how to use the virtual MFA device for sensitive operations. On the current page, we click the gray pen behind [Account Protection] and [Login Protection], and immediately pop up a window to prompt that authentication is required. The authentication method is "MFA authentication", and a dynamic password is required.

Prompt: The following figure shows that the virtual MFA device has been bound after the application is successful.

At this time, open the Tencent Cloud Assistant applet on the phone, click the "humanoid" icon in the lower right corner, find the six digit dynamic verification code of "virtual MFA" in the middle, enter it, and the operation is successful. And if the applet page refreshes or waits for tens of seconds, the verification code will change accordingly.

How to unbind Tencent cloud virtual MFA devices

In [Security Settings] and [Basic Settings], click "Unbind" on the far right, enter the 6-digit dynamic verification code, and then confirm.

In general, the principle of the virtual MFA device is the verification code generated based on the current time, and the generation end and verification end are both in Tencent Cloud's own system, so it is impossible to copy. It can fully guarantee the security of our account and operation. If you are building a website on Tencent Cloud and want to run an important business for a long time, you can consider adding a virtual MFA device to form a two-layer login and operation protection.