How does AliCloud set virtual MFA devices to improve the security of AliCloud accounts

If there is important server data or company data in our AliCloud account, in addition to improving security around the server itself, we also need to find ways from the AliCloud account. To improve account security Alibaba Cloud Virtual MFA , used to verify the identity multiple times during login, so as to ensure the security of the account. In this article, Mr. Wei will explain in detail what a virtual MFA device is and how to set up a virtual MFA for Alibaba Cloud.

What is a virtual MFA device

It is a simple and effective best security practice, which can add an additional layer of security protection to the user name and password.

After the virtual MFA device is enabled, the user needs to enter the user name and password when logging into the AliCloud website system. This is the first layer of protection, and then the user needs to enter the dynamic verification code of the virtual MFA device from the AliCloud app. This is the second layer of protection. Dual security authentication provides higher security protection for the account.

At present, Alibaba Cloud's official website supports software based virtual MFA devices. Including Google Authenticator and AliCloud app. AliCloud apps are commonly used in China. Before operation, go to the mobile app store and app market to download and install AliCloud apps, and log in with your own AliCloud account.

Please pay attention to the context of virtual MFA Enable unbinding MFA>What is MFA?

AliCloud sets virtual MFA devices

Click me directly On the AliCloud official website, after logging in to the account, click the user name in the upper right corner of the home page. Find the security settings on the left navigation bar. Look at the "Virtual MFA" in the middle of the right. The status on the right is "Unset". Click Start Setting.

Enter the mobile phone verification code, see the page shown in the following figure, scan the QR code with the AliCloud app on the mobile terminal, and fill in the six digits displayed.

This completes the setting of the virtual MFA device.

At this time, you exit the login status of AliCloud on the PC side. When you log in again using the account password, you need to enter the 6-digit virtual MFA verification code first, and then the system needs to verify the account password of the AliCloud account itself. You can log in normally only when it is correct.

Virtual MFA of AliCloud app

Where can I find this virtual MFA in Alibaba Cloud app? At first, Lao Wei could not find it. Later, after Alibaba Cloud customer service pointed out, the location was Alibaba Cloud app>Control>Product Console>Common Tools>Virtual MFA. After clicking on it, the six digit dynamic password was displayed. It only takes 30 seconds to enter the time, and the next group of passwords will be automatically changed after expiration.

How to cancel virtual MFA

If you don't want to continue using virtual MFA, the system provides two ways to unbind.

1. Security token unbinding

Open Alibaba Cloud official website As at the beginning of the article, find the security settings in the account management, and click "Unbind" on the right side of the virtual MFA. At this time, you need to verify your identity. Click "Verify Now" on the security token in the following figure.

Verify the 6-digit dynamic password provided by the virtual MFA device (that is, Alibaba Cloud app). The virtual MFA device is unbound after the verification is successful.

2. Manual customer service unbinding

If the virtual MFA information in the AliCloud app is deleted by mistake, you can submit an application for unbinding by going to PC account management>Security settings virtual MFA>Contact customer service>Immediate verification. Manual review takes 3 working days. Verify and confirm the identity before unbinding the virtual MFA device. This step is troublesome and tedious. In fact, during the manual audit, you can use the AliCloud app confirmation method to log in to the AliCloud account on the PC side and use the website functions normally.