> ## Documentation Index
> Fetch the complete documentation index at: https://docs.fjall.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Configure MFA

> Secure your AWS root account with multi-factor authentication before connecting it to Fjall.

Enable multi-factor authentication on your AWS root account. This protects the account that controls all your infrastructure before you connect it to Fjall.

## Prerequisites

* An AWS root account (the email used to create the account).

## Steps

1. **Sign in to your AWS Root Account**\
   [Open the AWS Console](https://aws.amazon.com/console/) and click on **Sign in**.

   <img src="https://mintcdn.com/fjall/SEhaHVzV3Jzcp_JQ/images/getting-started/aws-login.png?fit=max&auto=format&n=SEhaHVzV3Jzcp_JQ&q=85&s=b664906bba827f5dba56649a92492991" alt="AWS Console login" width="3376" height="1354" data-path="images/getting-started/aws-login.png" />

   *Figure 1: AWS Console login page.*

2. **Enter your root user email address**\
   This should be the same email used to create the AWS account.

   <img src="https://mintcdn.com/fjall/SEhaHVzV3Jzcp_JQ/images/getting-started/aws-signin-root-email.png?fit=max&auto=format&n=SEhaHVzV3Jzcp_JQ&q=85&s=ac1c42ddb800401cc921479aa43fdb48" alt="Root login email prompt" width="1968" height="1572" data-path="images/getting-started/aws-signin-root-email.png" />

   *Figure 2: Root account email entry.*

3. **Go to your Security Credentials**\
   Once logged in, click your account name (furthest top right) → **Security Credentials**.

   <img src="https://mintcdn.com/fjall/SEhaHVzV3Jzcp_JQ/images/getting-started/aws-security-menu.png?fit=max&auto=format&n=SEhaHVzV3Jzcp_JQ&q=85&s=8cb0e0798fe012e759db20431bd252ec" alt="Security credentials screen" width="1016" height="942" data-path="images/getting-started/aws-security-menu.png" />

   *Figure 3: Navigating to Security Credentials.*

4. **Assign MFA Device**\
   In the **Multi-factor authentication (MFA)** section, click **Assign MFA device**.\
   Choose your preferred method (Authenticator App, FIDO2 key, etc.), and follow the on-screen prompts.

   <img src="https://mintcdn.com/fjall/SEhaHVzV3Jzcp_JQ/images/getting-started/aws-assign-mfa.png?fit=max&auto=format&n=SEhaHVzV3Jzcp_JQ&q=85&s=08146bfc789acd8654410c9a28a19d97" alt="Assign MFA device" width="2528" height="1278" data-path="images/getting-started/aws-assign-mfa.png" />

   *Figure 4: Assigning an MFA device.*

## Next Steps

<CardGroup cols={2}>
  <Card title="Enable IAM Identity Center" icon="users" href="/initial-setup/enable-iam-identity-center">
    Set up centralised access for your AWS organisation
  </Card>

  <Card title="Enable Cost Explorer" icon="chart-line" href="/initial-setup/enable-cost-explorer">
    Turn on cost monitoring for your AWS account
  </Card>
</CardGroup>
