# Ensure MongoDB Atlas organization requires multi-factor authentication for user access

- Source: https://support.icompaas.com/support/solutions/articles/a_1792064020120906-ensure-mongodb-atlas-organization-requires-multi-factor-authentication-for-user-access
- Section: [Solutions](https://support.icompaas.com/support/solutions) › [Mongo DB](https://support.icompaas.com/support/solutions/c_1792063842186978) › [Checks](https://support.icompaas.com/support/solutions/folders/f_1792063855245422)
- Last updated: 2026-10-15
- Publisher: iCompaas, Inc. (https://www.icompaas.com)

**Description**

Ensure the Require Multi-Factor Authentication (MFA) setting is turned on for the Atlas organization, so that every Atlas user must set up MFA, such as a security key, biometrics, or an authenticator app, before they can access the organization.

**Rationale**

Atlas users can change clusters, database users, and network access. A stolen password alone could give an attacker this control. Requiring MFA for every user adds a second factor that a stolen password cannot pass, which blocks most account takeover attempts. MongoDB itself recommends MFA for all human users.

**Impact**

-   Every Atlas user must use MFA
    
-   Blocks sign-in with a stolen password alone
    
-   Users without MFA are prompted to set it up
    

**Default Value**

By default, MFA is not required at the organization level.

**Pre-Requisites**

-   Organization Owner role
    
-   MFA enabled on your own Atlas account (required before you can turn on the setting)
    

**Test Plan**

1.  Log in to MongoDB Atlas at [https://cloud.mongodb.com](https://cloud.mongodb.com/).
    
2.  Select your organization from the ORGANIZATION menu near the top of the page, then in the sidebar click Organization Settings. The Organization Settings page displays.
    
3.  Verify that Require Multi-Factor Authentication (MFA) is On.
    
4.  Alternatively, use the Atlas Administration API or the Atlas CLI ([https://www.mongodb.com/docs/atlas/cli/current/](https://www.mongodb.com/docs/atlas/cli/current/)). Run GET /api/atlas/v2/orgs/{orgId}/settings and check that multiFactorAuthRequired is true.
    
5.  If the setting is off, follow the implementation steps.
    

**Implementation Steps**

1.  Log in to MongoDB Atlas at [https://cloud.mongodb.com](https://cloud.mongodb.com/).
    
2.  Enable MFA on your own Atlas account first, from your account's security settings.
    
3.  Select your organization from the ORGANIZATION menu near the top of the page, then in the sidebar click Organization Settings. The Organization Settings page displays.
    
4.  Toggle Require Multi-Factor Authentication (MFA) to On.
    
5.  Tell users that they must set up MFA the next time they access the organization.
    

**Backout Plan**

1.  Log in to MongoDB Atlas at [https://cloud.mongodb.com](https://cloud.mongodb.com/).
    
2.  Select your organization from the ORGANIZATION menu near the top of the page, then in the sidebar click Organization Settings. The Organization Settings page displays.
    
3.  Toggle Require Multi-Factor Authentication (MFA) to Off.
    

**Reference**

-   [https://www.mongodb.com/docs/atlas/tutorial/manage-organizations/](https://www.mongodb.com/docs/atlas/tutorial/manage-organizations/)
    
-   [https://www.mongodb.com/docs/atlas/security-multi-factor-authentication/](https://www.mongodb.com/docs/atlas/security-multi-factor-authentication/)