| « PreviousNext » | |
![]() ![]() ![]() | Did this page help you? Yes | No | Tell us about it... |
Use the IAM console to verify that an MFA device is enabled and configured for the root account or IAM user. In this section, you'll learn how to check whether a root account or IAM user has a valid MFA device enabled.
To check the MFA status of a root account
Open the IAM console at https://console.aws.amazon.com/iam.
In the IAM Dashboard, check under Security Status to see whether MFA is enabled or disabled.

Click Manage MFA Device to change the current setting.
To check the MFA status of an IAM user
Open the IAM console at https://console.aws.amazon.com/iam.
Select Users.
Select the user.
In the Security Credentials tab of the user's details pane, if the user has an MFA device enabled, the Multi-Factor Authentication Device item shows a value for the device.

The Multi-Factor Authentication Device is either a value
for a virtual device, such as arn:aws:iam::123456789012:mfa/user,
or it is the device serial number for a hardware device (usually the number from
the back of the device), such as GAHT12345678.
Click Manage MFA Device to change the current setting.
For virtual device information, see Using a Virtual MFA Device with AWS.
For hardware device information, see Enabling a Hardware MFA Device for Use with AWS.