Enable multi-factor authentication

To add an extra layer of security to your Elasticsearch Service account, enable multi-factor authentication. When you enable multi-factor authentication, you are required to enter your login credentials, and are additionally authenticated using a device with SMS capabilities or the Google Authenticator application.

Before you begin

Verify that your device has SMS capabilities or download the Google Authenticator application onto your device.

We recommend that you download the Google Authenticator application onto your device.

Configure your account for multi-factor authentication

To use multi-factor authentication, you must enroll your device and enable multi-factor authentication for your account.

  1. Sign in to the Elasticsearch Service Console.
  2. Go to Account and then Security.
  3. Click Enroll Google Authenticator or Enroll SMS device, then follow the steps to enroll your device.

If you want to use a different device for multi-factor authentication, click Remove device under the device that you would like to replace, then repeat the steps above. If the device you want to remove is your only enrolled device, you must disable multi-factor authentication first.

If you device is lost or stolen, contact support.