Salesforce B2C Commerce 24.7 > B2C Commerce Security Guide > General Security Best Practices

Use 2FA on All Privileged Accounts

Two-factor authentication (2FA) is an extra layer of protection beyond a single password. The extra protection can be knowledge (something you know), possession (something you have), or biometrics (something you are). Using a second authentication factor, such as a mobile phone (something you have), provides additional protection against common security threats such as account takeover, fraud, data loss, malicious code, and phishing attacks.

By using the Salesforce Authenticator app, Account Manager uses the possession metric as the secondary form of authentication. Push notifications and verification codes for 2FA are supported.

Infocenter Retirement: On June 30, 2023, the Infocenter was retired, and documentation currently hosted on the Infocenter will be published to Salesforce Help, Commerce Cloud Developer Center, and Salesforce B2C Commerce Developer Documentation Resources. For more information, see the release note.