> For the complete documentation index, see [llms.txt](https://docs.defguard.net/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.defguard.net/using-defguard-for-end-users/desktop-client/configuring-mfa-methods.md).

# Configuring MFA methods in the Desktop Client

In this guide, you will learn how to add new MFA methods in the Defguard Desktop client. 

This process allows you to add the following MFA methods:

* Email
* Authenticator app
* FIDO2 Security Key

If you prefer a video guide watch the following.

{% embed url="<https://youtu.be/4-eSEm4IFwc>" %}

{% stepper %}
{% step %}

## Pick an entry point for the configure MFA process

There a three ways you can start the configure MFA methods process in the Defguard Desktop Client. Pick one according to your situation.

### Adding an MFA method from the Add page

Useful when you just want to add a new MFA method. Open Defguard in full window mode, click the + icon in the main menu and then click the Add new MFA method tile.

<figure><img src="https://1370451937-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpE5yODhpiy5pT1XxY0BS%2Fuploads%2Fgit-blob-8fd9b2244692055578378230a97dd62ca69fed68%2Fadd-new-mfa-method-card-marked.png?alt=media" alt=""><figcaption></figcaption></figure>

### Adding an MFA method from a location's MFA preferences

Useful when you want to quickly add a new, more preferable method and set it as you default one.

<div><figure><img src="https://content.gitbook.com/content/pE5yODhpiy5pT1XxY0BS/blobs/hgJnvdCNXcnEGc85pjwu/pen-icon-mfa-tray-view.png" alt=""><figcaption></figcaption></figure> <figure><img src="https://1370451937-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpE5yODhpiy5pT1XxY0BS%2Fuploads%2Fgit-blob-00bb4f63c1a3f37046176ca5dd52eb2c635e4ba3%2Fchange-mfa-method-configure-button-tray-view.png?alt=media" alt=""><figcaption></figcaption></figure></div>

### Adding a required MFA method you haven't configured yet

If a location requires an MFA method you haven't set up yet, you will see **Configure MFA** instead of **Connect VPN** on that location. You won't be locked out. Just configure the missing method and you can Connect back again.

<figure><img src="https://1370451937-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpE5yODhpiy5pT1XxY0BS%2Fuploads%2Fgit-blob-dcb41ec064679aa25d0fba95272d681d807915dc%2Fconfigure-mfa-button-tray-view.png?alt=media" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}

## Verify your identity

Before adding a new method, Defguard asks you to confirm your identity with a method you have already set up. If you don't have any MFA method yet, Defguard sends a verification code to your email instead.

<figure><img src="https://1370451937-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpE5yODhpiy5pT1XxY0BS%2Fuploads%2Fgflq42IQsSdNKWTwu10u%2FScreenshot%202026-11-06%20at%2022.47.09.png?alt=media&amp;token=b6038787-ace0-458c-90d4-e34e20686111" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}

## Select MFA methods to configure

Then select the MFA methods you want to add to your profile.

Methods already configured that can only be added once (like the Authenticator app or Email) are marked as *Not configurable*.

You can have multiple FIDO2 Security Keys in your profile so this method can be configured multiple times.

<figure><img src="https://1370451937-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpE5yODhpiy5pT1XxY0BS%2Fuploads%2FnmImPn48FZhGPzoqkbP2%2FScreenshot%202026-11-06%20at%2022.47.34.png?alt=media&amp;token=294adf2f-659c-472f-843f-07bfbd63eed4" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}

## Configure the selected methods

After you selected the methods to configure, Defguard Client will guide you through configuring each of them in a convinient wizard.

<figure><img src="https://1370451937-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpE5yODhpiy5pT1XxY0BS%2Fuploads%2FjaxjmA9SrspbfH2FI4t8%2FScreenshot%202026-11-06%20at%2022.47.39.png?alt=media&amp;token=88db5375-7412-42c2-abbf-e8d6021b982f" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}

## Store your recovery codes recurly

If that's the first time you configure an MFA method Defguard will present recoevery codes. These can be used when signing in to [your profile](/using-defguard-for-end-users/setting-up-2fa-mfa.md#accessing-the-profile-page) in case you lost access to all the configured MFA methods. Store them securly.

<figure><img src="https://1370451937-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpE5yODhpiy5pT1XxY0BS%2Fuploads%2Fgit-blob-5fec4c51cebf0035e6dc75c939b98c00ed608001%2Frecovery-codes.png?alt=media" alt=""><figcaption></figcaption></figure>
{% endstep %}

{% step %}

## Finishing the configuration

Your new MFA methods can be used immediately. To connect to a location with MFA, check out [this guide](/using-defguard-for-end-users/desktop-client/using-multi-factor-authentication-mfa.md).

<figure><img src="https://1370451937-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpE5yODhpiy5pT1XxY0BS%2Fuploads%2Fgit-blob-a3c1b2644606ae3f08015ad7771df95a1c775fbf%2Fconfigure-mfa-finish.png?alt=media" alt=""><figcaption></figcaption></figure>
{% endstep %}
{% endstepper %}