Customer 2FA/MFA

Topic summary

A merchant inquired about customer reluctance to create accounts without multi-factor authentication (MFA/2FA) options. While Shopify’s new passwordless customer accounts use email codes, they currently lack native MFA support.

Current limitations:

  • No optional MFA or app-based 2FA available in Shopify’s customer accounts
  • This is a recurring concern among merchants

Available workarounds:

  • For Shopify Plus merchants: Implement third-party authentication (Okta, Auth0) via Multipass
  • Indirect MFA approach: Enable Google/Facebook social login through Customer Accounts settings, which provides MFA only if users have it enabled on their social accounts

Status: No direct native MFA solution exists; merchants must rely on workarounds until Shopify adds official support.

Summarized with AI on October 24. AI used: claude-sonnet-4-5-20250929.

Hi all,

Has anyone had customers reluctant to create an account without being able to add MFA/2FA? The new customer accounts are better with the email code and no password, but for a lot of people MFA is a must on all their accounts.

Yeah, this keeps coming up. Shopify’s new customer accounts currently do not support optional multi-factor authentication (MFA) or app-based two-factor authentication (2FA). In the meantime, you could add a third-party authentication layer like Okta or Auth0 through Multipass (on Shopify Plus) to enable MFA until Shopify adds native support.

1 Like

Hello @securecommerce ,

I hope you are doing well!

Basically, you can add the MFA with the workaround. To activate Google/Facebook authentication, go to Customers account >> Click on Manage button next to Authentication >> You will get option to connect to Google or Facebook.

First you need to connect to Google/Facebook login and most of the accounts have mfa on the Google/Facebook. This will be Indirect MFA, only if user’s Google account has MFA enabled.

Currently, there is no direct way for MFA.

1 Like

Thanks @SealSubs-Roan and @AiTrillion