---
updatedAt: 2026-09-03T20:20:39.000Z
agentTools:
  projectIndex: https://developer.spreedly.com/llms.txt
---

# Adding MFA

<br />

> Note: This guide is only applicable if Dodgeball is fully integrated into your application (i.e. both client-side and server-side).

## Adding MFA from Scratch

1. Follow the steps to fully integrate Dodgeball into your application.
2. Visit the [Checkpoint Studio](https://app.dodgeballhq.com/workflow) to create a new Checkpoint.
3. From the **Step Palette** click on the **Services** tab. Scroll down until you see the **MFA** section, then drag the **Perform MFA** step into the checkpoint flow diagram.
4. Connect the Perform MFA step into the diagram where you want it to run. This will update the expected event payload to include a comma-separated list of phone numbers or email addresses. These will be options presented to the user of where to receive the MFA code.
5. Update the event payload sent to the checkpoint in your application's server-side code to include the new fields.
6. Hit the **Publish** button in the top-right of the Checkpoint Studio to make your changes live.

## Adding MFA to an Existing Checkpoint

1. Open the Checkpoint you'd like to add an MFA check to in the [Checkpoint Studio](https://app.dodgeballhq.com/workflow).
2. From the **Step Palette** click on the **Services** tab. Scroll down until you see the **MFA** section, then drag the **Perform MFA** step into the checkpoint flow diagram.
3. Connect the Perform MFA step into the diagram where you want it to run. This will update the expected event payload to include a comma-separated list of phone numbers or email addresses. These will be options presented to the user of where to receive the MFA code.
4. Update the event payload sent to the checkpoint in your application's server-side code to include the new fields.
5. Hit the **Publish** button in the top-right of the Checkpoint Studio to make your changes live.