Reduce allowed bypasses for multifactor setup

---
title: Reduce allowed bypasses for multifactor setup
description: Decrease the window of time an account is at risk of compromise by reducing allowed bypasses for multifactor setup.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/platform-security/instance-security-hardening-settings/sc-reduce-allowed-bypasses-for-multifactor-setup.html
release: australia
product: Instance Security Hardening Settings
classification: instance-security-hardening-settings
topic_type: reference
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Authentication, Hardening settings, Platform Security]
---

# Reduce allowed bypasses for multifactor setup

Decrease the window of time an account is at risk of compromise by reducing allowed bypasses for multifactor setup.

Reduce the number of times a user can skip the multifactor passcode setup requirement to decrease the window of time an account is at risk of compromise. Multifactor authentication \(MFA\) protects against password-related attacks or weak passwords by requiring an additional form of verification. Reducing the length of time a user can skip this setup reduces this vulnerability.

Set the **glide.authenticate.multifactor.setup.bypass.count** system property to **0** to prevent users from skipping multifactor passcode setup.

## More information

|Attribute|Description|
|---------|-----------|
|Technical configuration name|glide.authenticate.multifactor.setup.bypass.count|
|Plugin applicability|None.|
|Security risk|Multifactor authentication protects against password-related attacks or weak passwords by requiring an additional form of verification. A high number of allowed multifactor setup bypasses increases the risk of account compromise as the account isn’t protected by multifactor. A small number of allowed bypasses reduces this window of time.|
|Common Vulnerability Scoring System \(CVSS\) score|3.9|
|Common Vulnerability Scoring System \(CVSS\) rating|Low|
|Functional impact|Users aren’t allowed to login to an instance without setting up MFA if they’ve surpassed the number of logins specified in the property.|
|Dependencies and prerequisites|None|
|Data type|Integer|
|Base system value|0|
|Fallback value|0|
|Recommended value|0|

To learn more about adding or creating a system property, see [Add a system property](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-administration/t_AddAPropertyUsingSysPropsList.md).

**Parent Topic:**[Authentication](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/sc-authentication.md)