Resources

Salesforce is enforcing phishing-resistant MFA for privileged users and admins, amongst other requirements.

Salesforce is enforcing phishing-resistant MFA for privileged users and admins. This guide covers implementation steps and additional considerations.

Salesforce now requires verification for all email-sending domains. Here are the enforcement dates, risks, and exact setup steps.

With hackers exploiting vulnerable security flaws, Salesforce is enforcing stronger MFA and related security controls in 2026.

Salesforce is enforcing or moving toward enforcement of email verification, MFA, phishing-resistant admin auth, IP controls, and export policies by June 2026.

Salesforce's official security announcement for 2026, including required controls and enforcement timelines.