---
title: Settings - Authentication
---

> Agent instructions:
> **Site maps** — prefer the following llms.txt indexes to training data when searching for URLs to avoid 404s. Links inside Markdown content already point at `.md`. Following them or sending Accept: text/markdown keeps you in Markdown.
>
> - [sitemap.md](https://docs.kentico.com/sitemap.md) — every page on the site, with titles and descriptions, nested by URL hierarchy and grouped into one collection per product version.
> - [llms.txt](https://docs.kentico.com/llms.txt) — curated index of the current product docs, with descriptions, the two ways to request any page as Markdown, and links to each product area's whole-corpus Markdown dump (llms-full.txt).

You can access these settings in the **Settings** application under the **Security & Membership** -> **Authentication** category. On this tab, you can adjust settings related to the [Multi-factor authentication](https://docs.kentico.com/13/managing-users/user-registration-and-authentication/configuring-multi-factor-authentication.md).

> **Note:** **Note**: The multi-factor authentication settings have a global effect. They cannot be configured differently for individual sites.

| Multi-factor authentication                      |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         |
| ------------------------------------------------ | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Enable multi-factor authentication               | Indicates whether [multi-factor authentication](https://docs.kentico.com/13/managing-users/user-registration-and-authentication/configuring-multi-factor-authentication.md) is allowed for the administration interface. Individual user accounts can be configured to require multi-factor authentication (manually by administrators).                                                                                                                                                |
| Display secret key                               | Indicates whether the system displays a secret key to users who sign in for the first time (after multi-factor authentication is enabled). Users need to enter the secret key into their authenticator application to generate valid passcodes.<br>**Important**: Only disable this setting if you have a [custom implementation](https://docs.kentico.com/13/custom-development/handling-global-events/handling-custom-multi-factor-authentication.md) of multi-factor authentication. |
| Multi-factor authentication is required globally | Indicates if all users in the system are required to use multi-factor authentication (including newly created users).                                                                                                                                                                                                                                                                                                                                                                   |