At Multifactor, account security is our top priority. To help protect your most sensitive account resources, we have implemented a feature called "resource locks" to protect your production resources from accidental modification or deletion. In this article, we will explain what resource locks are, how they work, and how you can utilize them to protect your sensitive resources.

Resource locks are a security feature in Multifactor that allows certain resources and resource groups to be marked as "locked". When a resource or resource group is locked, it cannot be modified or deleted by anyone without being unlocked by Multifactor. This feature exists to protect production resources that are highly sensitive and could cause irreversible damage or significant downtime for end-users if accidentally modified or deleted.

By default, all resources and resource groups in your Multifactor organization are unlocked. However, if there are specific resources and groups that are critical to your application's functionality, you may contact Multifactor support to request a lock. Because resource locks can be reversed by Multifactor customer support, they are not a substitute for utilizing core account security features and fine-grained authorization, so it is important to use them in conjunction with these features.

If you need to temporarily or permanently unlock a locked resource or resource group, you can also contact support. Alternatively, we can make one-time changes to locked resources on your behalf without unlocking the resource.

It is important to note that unlocking a resource or modifying a locked resource may take 3 to 5 business days while we verify the legitimacy of your request. Therefore, it is not recommended to lock resources that require frequent changes with limited notice.

If you need to request a resource lock or unlock, you can contact Multifactor support. Our support team will be happy to assist you with any questions or concerns you may have regarding resource locks or any other Multifactor features.

When creating a new Multifactor organization, default resources and groups are created that are necessary for basic functionality. These starter resources are locked by default to prevent loss of access to your Multifactor organization. Please note that these default resources will not be unlocked by support, as doing so may cause your Multifactor account to become inaccessible.

It is important to remember that there is no way to lock or unlock resources on the dashboard. Resource locks can only be managed through a support request. Therefore, it is crucial to use resource locks sparingly and only for critical resources that require extra protection.

Resource locks are just one of the many security features that Multifactor offers to help you protect your sensitive resources. We highly recommend utilizing all available security features and regularly reviewing your account's security settings to ensure the safety of your resources.