User account security
Clerk provides features that strengthen a user's account with little effort.
Users can enable multifactor authentication for their accounts. In this case, every time they successfully authenticate, they must complete an additional challenge to verify their identity. Currently, only SMS-based multi-factor authentication is supported, and it can be enabled by creating a phone number for the User
object and then configuring it for multi-factor authentication.
Users can also change their password. Frequently updating a password leads to safer authentication. Even if a password is compromised, the new one can still be used to sign in. You can change a user's password by simply updating the User
object.
Finally, users can get a list of their active sessions and information about the device they signed in from.