---
title: Using MFA for SFTP Proxy
slug: end-user-guide-3-5-0-legacy-ui/using-mfa-for-sftp-proxy
description: Learn how to enable Multi-Factor Authentication (MFA) for SFTP connections using Kron PAM. Discover the step-by-step process for configuring SFTP clients like WinSCP and FileZilla to prompt users for their Kron PAM credentials and MFA token. Get valuable 
docTags: 
createdAt: 2022-08-10T15:04:51.000Z
---

:::hint{type="info"}
Only users in enabled User Groups can use MFA for SFTP connections.
:::

Kron PAM’s built-in MFA can be used as an enhanced security level for SFTP Proxy. 

When you open an SFTP Client (WinSCP or FileZilla), you are prompted to enter your Kron PAM credentials to connect to the SFTP Proxy.

- **For FileZilla connections:** After logging in successfully with your credentials, you are prompted to enter an MFA token.
- **For WinSCP connections:** You enter Kron PAM credentials and MFA token on the same screen**.**

Also, SFTP clients have their own configurations for MFA usage. For instance, the logon type must be selected as interactive to enable MFA for a user. See the MFA Usage on FileZilla figure below.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/l4GfUMgHoQcYtXdUDTGur_image.png" size="68" width="621" height="178" caption="MFA Usage on FileZilla" position="center" showCaption="true"}

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/MMu2qnMlTdk5s0PvU_F2c_image.png" size="68" width="621" height="301" caption="MFA Usage on WinSCP" position="center" showCaption="true"}