---
title: Multi-Factor Authentication (MFA)
slug: end-user-guide-3-5-0-legacy-ui/multi-factor-authentication-mfa
description: Get enhanced security with Kron PAM's Multi-Factor Authentication (MFA) capabilities. Configure and test MFA during deployment with options for online and offline modes. Utilize the mobile app or SMS verification for seamless authentication. In offline mo
docTags: 
createdAt: 2022-08-10T15:44:32.000Z
---

Kron PAM can be leveraged for Multi-Factor Authentication. The definitions for Multi-Factor Authentication are configured and tested by the system admin during deployment.

Kron PAM’s MFA is available in online/offline modes with the mobile application and SMS verification.

# Offline Mode 

1. Download the Kron PAM Mobile Application from the App Store or Google Play Store.
2. Log in to the Kron PAM Web GUI.
3. Navigate to **Administration **>** 2FA Provisioning**. A QR code and activation code will be displayed. A new QR code and activation code can be generated by clicking the **Generate New One b**utton.
4. Open the Kron PAM Mobile Application. Navigate to **Offline Token** > **QR Code **or** Manual.**
5. Scan the QR code or enter the activation code manually on the mobile application.
6. A Multi-Factor Authentication code will be generated for a predefined time interval on the mobile application.

![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/ju-3NJUqWQSOoJ3m_AvWZ_image.png "Multi-Factor Authentication (MFA) Activation Menu")

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/r1EnEnMdZlbjVx7trPXIi_image.png" size="52" width="370" height="462" position="center" showCaption="false"}

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/9G-bLGS6Ala6o6KmAMO81_image.png" size="52" width="275" height="471" position="center" showCaption="false"}

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/9DsHTuGO4o7pap-swIEOj_image.png" size="52" width="271" height="472" position="center" caption="Multi-Factor Authentication (MFA) Activation" alt="3" showCaption="true"}

# SMS Verification

When a new token is generated by Kron PAM, it will be sent to the user via SMS.

**Assign Hardware Token**

The hardware token provided to the users can be stored on Kron PAM.

1. Navigate to **2FA Provisioning**.
2. Open the **Assign Hardware Token** tab.
3. Enter the serial number of the device to which the hardware token is assigned.
4. Click **Assign**.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/g2RhmJDE-uIa-sBBHF5lz_image.png" size="52" width="621" height="242" caption="Assign Hardware Token" position="center" showCaption="true"}