A nonprofit customer is concerned about its users having their Salesforce usernames and passwords compromised.

To enhance the security of Salesforce usernames and passwords and prevent them from being compromised, setting up two-factor authentication (2FA) is the recommended approach. Here’s how to implement it:

Enable Two-Factor Authentication for the Org:

Navigate to Setup.

In the Quick Find box, type "Two-Factor Authentication" and select it.

Enable 2FA at the organization level.

Assign 2FA to User Profiles:

Go to the user profiles that require 2FA.

Under the profile settings, enable the requirement for two-factor authentication.

Configure 2FA Methods:

Allow users to register their preferred authentication method (e.g., Salesforce Authenticator app, SMS, email, or third-party authenticator apps).

Ensure users set up their 2FA methods through their personal settings.

User Training and Support:

Provide training materials and support to help users understand and set up 2FA.

Offer assistance for troubleshooting common issues during the setup process.

Monitor and Enforce:

Use Salesforce’s monitoring tools to ensure compliance with 2FA requirements.

Regularly review and update security policies to maintain a high level of security.

Implementing two-factor authentication significantly reduces the risk of account compromise by adding an extra layer of security beyond just usernames and passwords.

"Setting Up Two-Factor Authentication" from Salesforce Help: Two-Factor Authentication

"Salesforce Authenticator" from Salesforce Help: Salesforce Authenticator