AWS IAM now enforces MFA for root users across all account types
News
AWS Identity and Access Management (IAM) has expanded multi-factor authentication (MFA) requirements to root users across all account types, enhancing security measures for AWS customers.
- MFA now mandatory for root users in all account types
- Builds on previous security enhancements since May 2024
- MFA prevents over 99% of password-related attacks
- Supports multiple MFA methods, including FIDO2 passkeys
- Users can register up to 8 MFA devices per root and IAM user
- For AWS Organizations, centralized access management is recommended
This initiative represents AWS's continued commitment to enhancing account security and implementing "secure by design" principles.
The AWS News Feed is currently looking for gold sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.
Related articles
Jun 11
2024
2024
AWS adds passkey multi-factor authentication (MFA) for root and IAM users
Jun 17
2025
2025
IAM Access Analyzer now identifies who in your AWS organization can access your AWS resources
Jun 17
2025
2025
Verify internal access to critical AWS resources with new IAM Access Analyzer capabilities
Apr 23
2025
2025
AWS Account Management now supports IAM-based account name updates
The AWS News Feed is currently looking for silver sponsors. If you want to support the AWS community and reach a large audience of AWS professionals, consider sponsoring the AWS News Feed.