{"id":48054,"date":"2025-12-05T02:24:21","date_gmt":"2025-12-05T02:24:21","guid":{"rendered":"https:\/\/staging.pageloot.com\/uncategorized\/salesforce-qr-code-authentication-best-practices\/"},"modified":"2026-05-20T10:33:44","modified_gmt":"2026-05-20T10:33:44","slug":"salesforce-qr-code-authentication-best-practices","status":"publish","type":"post","link":"https:\/\/pageloot.com\/vi\/blog\/salesforce-qr-code-authentication-best-practices\/","title":{"rendered":"B\u1ea3o m\u1eadt Salesforce MFA m\u00e3 QR: C\u00e1c ph\u01b0\u01a1ng ph\u00e1p hay nh\u1ea5t d\u00e0nh cho qu\u1ea3n tr\u1ecb vi\u00ean"},"content":{"rendered":"<p class=\"wp-block-paragraph\">B\u1ea1n \u0111ang t\u00ecm ki\u1ebfm c\u00e1ch an to\u00e0n nh\u1ea5t \u0111\u1ec3 tri\u1ec3n khai Salesforce MFA b\u1eb1ng m\u00e3 QR? Vi\u1ec7c kh\u00f4ng b\u1ea3o m\u1eadt quy tr\u00ecnh \u0111\u0103ng k\u00fd c\u00f3 th\u1ec3 khi\u1ebfn t\u1ed5 ch\u1ee9c c\u1ee7a b\u1ea1n g\u1eb7p ph\u1ea3i c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng quishing v\u00e0 \u0111\u00e1nh c\u1eafp th\u00f4ng tin x\u00e1c th\u1ef1c. H\u01b0\u1edbng d\u1eabn n\u00e0y gi\u1ea3i th\u00edch c\u00e1ch c\u1ea5u h\u00ecnh x\u00e1c th\u1ef1c d\u1ef1a tr\u00ean QR v\u00e0 tu\u00e2n th\u1ee7 c\u00e1c giao th\u1ee9c b\u1ea3o m\u1eadt ti\u00eau chu\u1ea9n ng\u00e0nh \u0111\u1ec3 b\u1ea3o v\u1ec7 d\u1eef li\u1ec7u c\u1ee7a b\u1ea1n.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-how-qr-codes-facilitate-salesforce-mfa\">M\u00e3 QR h\u1ed7 tr\u1ee3 Salesforce MFA nh\u01b0 th\u1ebf n\u00e0o<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Salesforce s\u1eed d\u1ee5ng c\u00e1c giao th\u1ee9c M\u1eadt kh\u1ea9u m\u1ed9t l\u1ea7n d\u1ef1a tr\u00ean th\u1eddi gian (TOTP) \u0111\u1ec3 cung c\u1ea5p n\u0103ng l\u01b0\u1ee3ng cho x\u00e1c th\u1ef1c \u0111a y\u1ebfu t\u1ed1 (MFA) c\u1ee7a m\u00ecnh. H\u00e3y coi m\u00e3 QR nh\u01b0 m\u1ed9t c\u00e1i b\u1eaft tay k\u1ef9 thu\u1eadt s\u1ed1 gi\u1eefa phi\u00ean b\u1ea3n Salesforce c\u1ee7a b\u1ea1n v\u00e0 m\u1ed9t thi\u1ebft b\u1ecb \u0111\u00e1ng tin c\u1eady. Khi ng\u01b0\u1eddi d\u00f9ng l\u1ea7n \u0111\u1ea7u ti\u00ean \u0111\u0103ng k\u00fd \u1ee9ng d\u1ee5ng x\u00e1c th\u1ef1c, Salesforce s\u1ebd t\u1ea1o m\u1ed9t m\u00e3 QR duy nh\u1ea5t ch\u1ee9a kh\u00f3a b\u00ed m\u1eadt \u0111\u01b0\u1ee3c chia s\u1ebb. B\u1eb1ng c\u00e1ch qu\u00e9t m\u00e3 n\u00e0y, thi\u1ebft b\u1ecb di \u0111\u1ed9ng thi\u1ebft l\u1eadp m\u1ed9t li\u00ean k\u1ebft an to\u00e0n \u0111\u1ec3 t\u1ea1o m\u00e3 x\u00e1c minh 6 ch\u1eef s\u1ed1 c\u1ee9 sau 30 gi\u00e2y.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Vi\u1ec7c tri\u1ec3n khai quy tr\u00ecnh n\u00e0y gi\u00fap gi\u1ea3m hi\u1ec7u qu\u1ea3 nguy c\u01a1 chi\u1ebfm \u0111o\u1ea1t t\u00e0i kho\u1ea3n t\u1ef1 \u0111\u1ed9ng t\u1edbi 99,91%, theo nghi\u00ean c\u1ee9u c\u1ee7a Microsoft. Tuy nhi\u00ean, t\u00ednh b\u1ea3o m\u1eadt c\u1ee7a ph\u01b0\u01a1ng ph\u00e1p n\u00e0y ph\u1ee5 thu\u1ed9c r\u1ea5t nhi\u1ec1u v\u00e0o m\u1ed9t giai \u0111o\u1ea1n \u0111\u0103ng k\u00fd s\u1ea1ch. Qu\u1ea3n tr\u1ecb vi\u00ean ph\u1ea3i \u0111\u1ea3m b\u1ea3o r\u1eb1ng ng\u01b0\u1eddi d\u00f9ng ch\u1ec9 qu\u00e9t m\u00e3 \u0111\u01b0\u1ee3c t\u1ea1o trong mi\u1ec1n `login.salesforce.com` ch\u00ednh th\u1ee9c. Vi\u1ec7c s\u1eed d\u1ee5ng <a href=\"https:\/\/pageloot.com\/vi\/blog\/encrypted-qr-codes-for-authentication-platforms\/\">m\u00e3 QR \u0111\u01b0\u1ee3c m\u00e3 h\u00f3a cho c\u00e1c n\u1ec1n t\u1ea3ng x\u00e1c th\u1ef1c<\/a> \u0111ang tr\u1edf th\u00e0nh m\u1ed9t ti\u00eau chu\u1ea9n cho b\u1ea3o m\u1eadt doanh nghi\u1ec7p, v\u00ec n\u00f3 \u0111\u1ea3m b\u1ea3o r\u1eb1ng ch\u1ec9 nh\u1eefng ng\u01b0\u1eddi d\u00f9ng \u0111\u01b0\u1ee3c \u1ee7y quy\u1ec1n c\u00f3 kh\u00f3a gi\u1ea3i m\u00e3 ch\u00ednh x\u00e1c m\u1edbi c\u00f3 th\u1ec3 truy c\u1eadp d\u1eef li\u1ec7u \u0111\u0103ng k\u00fd nh\u1ea1y c\u1ea3m.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-managing-security-risks-in-the-enrollment-flow\">Qu\u1ea3n l\u00fd r\u1ee7i ro b\u1ea3o m\u1eadt trong quy tr\u00ecnh \u0111\u0103ng k\u00fd<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">M\u1eb7c d\u00f9 m\u00e3 QR mang l\u1ea1i s\u1ef1 ti\u1ec7n l\u1ee3i, nh\u01b0ng ch\u00fang d\u1ec5 b\u1ecb t\u1ea5n c\u00f4ng b\u1edfi c\u00e1c m\u1ed1i \u0111e d\u1ecda chuy\u00ean bi\u1ec7t. \u201c\u0110\u0103ng k\u00fd MFA y\u1ebfu l\u00e0 th\u1ea5t b\u1ea1i tri\u1ec3n khai l\u1edbn nh\u1ea5t,\u201d CISO c\u1ee7a Okta \u0111\u00e3 l\u01b0u \u00fd v\u00e0o n\u0103m 2025. \u0110\u1ec3 duy tr\u00ec m\u1ed9t h\u1ec7 th\u1ed1ng ph\u00f2ng th\u1ee7 m\u1ea1nh m\u1ebd, b\u1ea1n ph\u1ea3i hi\u1ec3u c\u00e1ch k\u1ebb t\u1ea5n c\u00f4ng khai th\u00e1c quy tr\u00ecnh \u0111\u0103ng k\u00fd.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-common-threats-to-qr-authentication\">C\u00e1c m\u1ed1i \u0111e d\u1ecda ph\u1ed5 bi\u1ebfn \u0111\u1ed1i v\u1edbi x\u00e1c th\u1ef1c QR<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>  <strong>Quishing (L\u1eeba \u0111\u1ea3o QR)<\/strong>: K\u1ebb t\u1ea5n c\u00f4ng s\u1eed d\u1ee5ng c\u00e1c trang \u0111\u0103ng nh\u1eadp gi\u1ea3 m\u1ea1o \u0111\u1ec3 l\u1eeba ng\u01b0\u1eddi d\u00f9ng qu\u00e9t m\u00e3 QR \u0111\u1ed9c h\u1ea1i, m\u00e3 n\u00e0y s\u1ebd \u0111\u0103ng k\u00fd thi\u1ebft b\u1ecb c\u1ee7a k\u1ebb t\u1ea5n c\u00f4ng thay v\u00ec c\u1ee7a ng\u01b0\u1eddi d\u00f9ng.<\/li>\n\n\n\n<li>  <strong>L\u1edbp ph\u1ee7 \u0111\u1ed9c h\u1ea1i<\/strong>: Trong m\u00f4i tr\u01b0\u1eddng v\u1eadt l\u00fd, c\u00e1c nh\u00e3n d\u00e1n gian l\u1eadn \u0111\u01b0\u1ee3c \u0111\u1eb7t ch\u1ed3ng l\u00ean m\u00e3 QR h\u1ee3p ph\u00e1p \u0111\u1ec3 chuy\u1ec3n h\u01b0\u1edbng ng\u01b0\u1eddi d\u00f9ng \u0111\u1ebfn c\u00e1c trang web gi\u1ea3 m\u1ea1o.<\/li>\n\n\n\n<li>  <strong>Thi\u1ebft b\u1ecb b\u1ecb x\u00e2m nh\u1eadp<\/strong>: N\u1ebfu ph\u1ea7n m\u1ec1m \u0111\u1ed9c h\u1ea1i l\u00e2y nhi\u1ec5m v\u00e0o thi\u1ebft b\u1ecb di \u0111\u1ed9ng, n\u00f3 c\u00f3 th\u1ec3 tr\u00edch xu\u1ea5t kh\u00f3a b\u00ed m\u1eadt TOTP tr\u1ef1c ti\u1ebfp t\u1eeb \u1ee9ng d\u1ee5ng x\u00e1c th\u1ef1c.<\/li>\n\n\n\n<li>  <strong>Ch\u1eb7n (MitM)<\/strong>: C\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng proxy c\u00f3 th\u1ec3 ch\u1eb7n giao ti\u1ebfp gi\u1eefa tr\u00ecnh duy\u1ec7t v\u00e0 \u1ee9ng d\u1ee5ng x\u00e1c th\u1ef1c trong qu\u00e1 tr\u00ecnh thi\u1ebft l\u1eadp ban \u0111\u1ea7u.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u1ec3 gi\u1ea3m thi\u1ec3u nh\u1eefng r\u1ee7i ro n\u00e0y, h\u00e3y tu\u00e2n th\u1ee7 <a href=\"https:\/\/pageloot.com\/vi\/blog\/best-practices-for-qr-code-security-in-cyber-defense\/\">c\u00e1c ph\u01b0\u01a1ng ph\u00e1p hay nh\u1ea5t v\u1ec1 b\u1ea3o m\u1eadt m\u00e3 QR trong ph\u00f2ng th\u1ee7 m\u1ea1ng<\/a> b\u1eb1ng c\u00e1ch x\u00e1c minh ngu\u1ed3n g\u1ed1c c\u1ee7a m\u1ecdi m\u00e3. Salesforce c\u0169ng \u0111\u1ec1 xu\u1ea5t s\u1eed d\u1ee5ng c\u00e1c ph\u01b0\u01a1ng ph\u00e1p MFA ch\u1ed1ng l\u1eeba \u0111\u1ea3o n\u1ebfu c\u00f3 th\u1ec3, ch\u1eb3ng h\u1ea1n nh\u01b0 kh\u00f3a b\u1ea3o m\u1eadt FIDO2, ho\u1eb7c tri\u1ec3n khai kh\u1edbp s\u1ed1 trong th\u00f4ng b\u00e1o \u0111\u1ea9y \u0111\u1ec3 \u0111\u1ea3m b\u1ea3o ng\u01b0\u1eddi d\u00f9ng c\u00f3 m\u1eb7t th\u1ef1c t\u1ebf trong qu\u00e1 tr\u00ecnh \u0111\u0103ng nh\u1eadp.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-best-practices-for-admin-implementation\">C\u00e1c ph\u01b0\u01a1ng ph\u00e1p hay nh\u1ea5t \u0111\u1ec3 tri\u1ec3n khai cho qu\u1ea3n tr\u1ecb vi\u00ean<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Tri\u1ec3n khai MFA th\u00e0nh c\u00f4ng \u0111\u00f2i h\u1ecfi s\u1ef1 c\u00e2n b\u1eb1ng gi\u1eefa vi\u1ec7c th\u1ef1c thi ch\u00ednh s\u00e1ch nghi\u00eam ng\u1eb7t v\u00e0 h\u1ed7 tr\u1ee3 ng\u01b0\u1eddi d\u00f9ng to\u00e0n di\u1ec7n. Theo B\u00e1o c\u00e1o \u0111i\u1ec1u tra vi ph\u1ea1m d\u1eef li\u1ec7u (DBIR) n\u0103m 2024 c\u1ee7a Verizon, 61% c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng v\u01b0\u1ee3t qua MFA y\u1ebfu ho\u1eb7c c\u1ea5u h\u00ecnh sai, khi\u1ebfn c\u00e1c l\u1ef1a ch\u1ecdn c\u1ea5u h\u00ecnh c\u1ee7a b\u1ea1n tr\u1edf n\u00ean quan tr\u1ecdng. S\u1eed d\u1ee5ng c\u00e1c chi\u1ebfn l\u01b0\u1ee3c n\u00e0y \u0111\u1ec3 c\u1ee7ng c\u1ed1 m\u00f4i tr\u01b0\u1eddng Salesforce c\u1ee7a b\u1ea1n:<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"https:\/\/pageloot.com\/wp-content\/uploads\/2026\/03\/simple-clean-infographic-square-or-vertical-format-white-background-with-black-2368-e4b4faa955df.webp\" alt=\"C\u00e1c b\u01b0\u1edbc b\u1ea3o m\u1eadt MFA b\u1eb1ng QR\"\/><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li>  <strong>B\u1eaft bu\u1ed9c MFA cho t\u1ea5t c\u1ea3 ng\u01b0\u1eddi d\u00f9ng<\/strong>: \u00c1p d\u1ee5ng c\u00e1c y\u00eau c\u1ea7u MFA th\u00f4ng qua ph\u1ea7n \u201cX\u00e1c minh danh t\u00ednh\u201d trong Thi\u1ebft l\u1eadp, b\u1eaft \u0111\u1ea7u v\u1edbi Qu\u1ea3n tr\u1ecb vi\u00ean h\u1ec7 th\u1ed1ng tr\u01b0\u1edbc khi tri\u1ec3n khai theo t\u1eebng giai \u0111o\u1ea1n cho to\u00e0n b\u1ed9 t\u1ed5 ch\u1ee9c.<\/li>\n\n\n\n<li>  <strong>Cung c\u1ea5p nhi\u1ec1u ph\u01b0\u01a1ng ph\u00e1p sao l\u01b0u<\/strong>: \u0110\u1ea3m b\u1ea3o ng\u01b0\u1eddi d\u00f9ng \u0111\u0103ng k\u00fd c\u00e1c y\u1ebfu t\u1ed1 ph\u1ee5, ch\u1eb3ng h\u1ea1n nh\u01b0 m\u00e3 d\u1ef1 ph\u00f2ng ho\u1eb7c kh\u00f3a b\u1ea3o m\u1eadt ph\u1ee5, \u0111\u1ec3 ng\u0103n ch\u1eb7n t\u00ecnh tr\u1ea1ng kh\u00f3a t\u00e0i kho\u1ea3n khi thi\u1ebft b\u1ecb b\u1ecb m\u1ea5t.<\/li>\n\n\n\n<li>  <strong>Ki\u1ec3m tra nh\u1eadt k\u00fd \u0111\u0103ng k\u00fd<\/strong>: Th\u01b0\u1eddng xuy\u00ean xem x\u00e9t nh\u1eadt k\u00fd ki\u1ec3m tra c\u1ee7a Salesforce \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh c\u00e1c b\u1ea5t th\u01b0\u1eddng v\u1ec1 \u0111\u1ecba l\u00fd ho\u1eb7c c\u00e1c m\u1eabu \u0111\u0103ng k\u00fd \u0111\u00e1ng ng\u1edd kh\u00e1c v\u1edbi h\u00e0nh vi ng\u01b0\u1eddi d\u00f9ng b\u00ecnh th\u01b0\u1eddng.<\/li>\n\n\n\n<li>  <strong>Th\u1ef1c thi c\u00e1c tr\u00ecnh x\u00e1c th\u1ef1c r\u00e0ng bu\u1ed9c thi\u1ebft b\u1ecb<\/strong>: S\u1eed d\u1ee5ng <a href=\"https:\/\/scalefusion.com\/mobile-device-management\">Mobile Device Management (MDM) software<\/a> to ensure that authenticator apps are only installed on company-approved and secured devices.<\/li>\n\n\n\n<li>  <strong>Xoay v\u00f2ng b\u00ed m\u1eadt th\u01b0\u1eddng xuy\u00ean<\/strong>: N\u1ebfu b\u1ea1n nghi ng\u1edd c\u00f3 s\u1ef1 x\u00e2m ph\u1ea1m, h\u00e3y s\u1eed d\u1ee5ng quy\u1ec1n \u201cQu\u1ea3n l\u00fd MFA\u201d \u0111\u1ec3 \u0111\u1eb7t l\u1ea1i b\u00ed m\u1eadt ng\u01b0\u1eddi d\u00f9ng v\u00e0 bu\u1ed9c \u0111\u0103ng k\u00fd QR m\u1edbi.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-table\">\n<table class=\"wp-block-table__content\">\n<thead>\n<tr>\n<th>T\u00ednh n\u0103ng<\/th>\n<th>M\u00e3 QR t\u0129nh<\/th>\n<th>M\u00e3 QR \u0111\u1ed9ng<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td><strong>Kh\u1ea3 n\u0103ng ch\u1ec9nh s\u1eeda<\/strong><\/td>\n<td>D\u1eef li\u1ec7u l\u00e0 v\u0129nh vi\u1ec5n sau khi \u0111\u01b0\u1ee3c t\u1ea1o<\/td>\n<td>N\u1ed9i dung c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c c\u1eadp nh\u1eadt b\u1ea5t c\u1ee9 l\u00fac n\u00e0o<\/td>\n<\/tr>\n<tr>\n<td><strong>Theo d\u00f5i<\/strong><\/td>\n<td>Kh\u00f4ng c\u00f3 ph\u00e2n t\u00edch qu\u00e9t n\u00e0o kh\u1ea3 d\u1ee5ng<\/td>\n<td>Cung c\u1ea5p d\u1eef li\u1ec7u qu\u00e9t theo th\u1eddi gian th\u1ef1c<\/td>\n<\/tr>\n<tr>\n<td><strong>B\u1ea3o v\u1ec7<\/strong><\/td>\n<td>L\u01b0u tr\u1eef th\u00f4ng tin c\u01a1 b\u1ea3n<\/td>\n<td>Bao g\u1ed3m m\u1eadt kh\u1ea9u v\u00e0 ki\u1ec3m so\u00e1t truy c\u1eadp<\/td>\n<\/tr>\n<tr>\n<td><strong>Ma s\u00e1t<\/strong><\/td>\n<td>C\u00e1c m\u1eabu d\u00e0y \u0111\u1eb7c h\u01a1n c\u00f3 th\u1ec3 kh\u00f4ng qu\u00e9t \u0111\u01b0\u1ee3c<\/td>\n<td>URL ng\u1eafn t\u1ea1o ra m\u00e3 s\u1ea1ch h\u01a1n, nhanh h\u01a1n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/figure>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\"><strong>C\u1ea7n qu\u1ea3n l\u00fd m\u00e3 QR an to\u00e0n cho t\u1ed5 ch\u1ee9c c\u1ee7a b\u1ea1n?<\/strong> <a href=\"https:\/\/pageloot.com\/vi\/dynamic-qr-code-generator\/\">Kh\u00e1m ph\u00e1 Tr\u00ecnh t\u1ea1o m\u00e3 QR \u0111\u1ed9ng c\u1ee7a ch\u00fang t\u00f4i<\/a> \u0111\u1ec3 t\u1ea1o m\u00e3 QR c\u00f3 th\u1ec3 ch\u1ec9nh s\u1eeda, theo d\u00f5i v\u00e0 \u0111\u01b0\u1ee3c b\u1ea3o v\u1ec7 b\u1eb1ng m\u1eadt kh\u1ea9u cho t\u00e0i li\u1ec7u n\u1ed9i b\u1ed9 v\u00e0 quy tr\u00ecnh gi\u1edbi thi\u1ec7u k\u1ef9 thu\u1eadt c\u1ee7a b\u1ea1n.<\/p>\n<\/blockquote>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-improving-qr-code-readability-and-performance\">C\u1ea3i thi\u1ec7n kh\u1ea3 n\u0103ng \u0111\u1ecdc v\u00e0 hi\u1ec7u su\u1ea5t c\u1ee7a m\u00e3 QR<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">M\u1ed9t tr\u1edf ng\u1ea1i ph\u1ed5 bi\u1ebfn \u0111\u1ed1i v\u1edbi c\u00e1c chuy\u00ean gia CNTT l\u00e0 phi\u1ebfu h\u1ed7 tr\u1ee3 \u201cqu\u00e9t kh\u00f4ng th\u00e0nh c\u00f4ng\u201d, m\u00e0 Forrester b\u00e1o c\u00e1o g\u00e2y ra 23% kh\u00f3a MFA. \u0110\u1ed9 ph\u00e2n gi\u1ea3i m\u00e0n h\u00ecnh k\u00e9m, \u0111\u1ed9 t\u01b0\u01a1ng ph\u1ea3n kh\u00f4ng ph\u00f9 h\u1ee3p ho\u1eb7c \u00e1nh s\u00e1ng ch\u00f3i c\u00f3 th\u1ec3 ng\u0103n camera di \u0111\u1ed9ng \u0111\u1ecdc m\u00e3 \u0111\u0103ng k\u00fd. \u0110\u1ec3 gi\u1ea3m b\u1edbt nh\u1eefng \u0111i\u1ec3m ma s\u00e1t n\u00e0y, h\u00e3y l\u00e0m theo <a href=\"https:\/\/pageloot.com\/vi\/blog\/best-practices-for-qr-code-readability\/\">c\u00e1c ph\u01b0\u01a1ng ph\u00e1p hay nh\u1ea5t \u0111\u1ec3 \u0111\u1ecdc m\u00e3 QR<\/a> b\u1eb1ng c\u00e1ch duy tr\u00ec t\u1ef7 l\u1ec7 t\u01b0\u01a1ng ph\u1ea3n \u00edt nh\u1ea5t 4:1.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0110\u1ea3m b\u1ea3o \u201cv\u00f9ng y\u00ean t\u0129nh\u201d, l\u00e0 \u0111\u01b0\u1eddng vi\u1ec1n tr\u1eafng xung quanh m\u00e3, kh\u00f4ng b\u1ecb c\u1ea3n tr\u1edf b\u1edfi c\u00e1c y\u1ebfu t\u1ed1 giao di\u1ec7n ng\u01b0\u1eddi d\u00f9ng kh\u00e1c. Khi t\u1ea1o t\u00e0i li\u1ec7u cho nh\u00f3m c\u1ee7a b\u1ea1n, h\u00e3y \u0111\u1eb7t m\u1ee5c ti\u00eau k\u00edch th\u01b0\u1edbc t\u1ed1i thi\u1ec3u l\u00e0 0,8 x 0,8 inch \u0111\u1ec3 \u0111\u1ea3m b\u1ea3o kh\u1ea3 n\u0103ng t\u01b0\u01a1ng th\u00edch v\u1edbi c\u00e1c camera \u0111i\u1ec7n tho\u1ea1i th\u00f4ng minh c\u0169 h\u01a1n. B\u1eb1ng c\u00e1ch l\u00e0m theo <a href=\"https:\/\/pageloot.com\/vi\/blog\/secure-qr-code-generation-best-practices\/\">c\u00e1c ph\u01b0\u01a1ng ph\u00e1p hay nh\u1ea5t \u0111\u1ec3 t\u1ea1o m\u00e3 QR an to\u00e0n<\/a>, b\u1ea1n c\u00f3 th\u1ec3 \u0111\u1ea3m b\u1ea3o c\u00e1c m\u00e3 v\u1eabn s\u1eafc n\u00e9t v\u00e0 c\u00f3 th\u1ec3 qu\u00e9t \u0111\u01b0\u1ee3c ngay c\u1ea3 khi in trong t\u00e0i li\u1ec7u \u0111\u00e0o t\u1ea1o.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-user-training-and-help-desk-preparation\">\u0110\u00e0o t\u1ea1o ng\u01b0\u1eddi d\u00f9ng v\u00e0 Chu\u1ea9n b\u1ecb cho B\u1ed9 ph\u1eadn H\u1ed7 tr\u1ee3<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">L\u1ed7i c\u1ee7a con ng\u01b0\u1eddi v\u1eabn l\u00e0 m\u1ed9t l\u1ed7 h\u1ed5ng \u0111\u00e1ng k\u1ec3 trong h\u1ec7 th\u1ed1ng b\u1ea3o m\u1eadt. Ngo\u00e0i vi\u1ec7c thi\u1ebft l\u1eadp k\u1ef9 thu\u1eadt, qu\u1ea3n tr\u1ecb vi\u00ean ph\u1ea3i chu\u1ea9n b\u1ecb cho ng\u01b0\u1eddi d\u00f9ng nh\u1eadn bi\u1ebft c\u00e1c m\u1ed1i \u0111e d\u1ecda v\u00e0 t\u1ef1 qu\u1ea3n l\u00fd vi\u1ec7c kh\u00f4i ph\u1ee5c c\u1ee7a h\u1ecd. Cung c\u1ea5p cho ng\u01b0\u1eddi d\u00f9ng <a href=\"https:\/\/pageloot.com\/vi\/qr-codes-for\/software\/\">M\u00e3 QR cho ph\u1ea7n m\u1ec1m<\/a> h\u01b0\u1edbng d\u1eabn gi\u1edbi thi\u1ec7u c\u00f3 th\u1ec3 t\u0103ng t\u1ed1c \u0111\u1ed9 ch\u1ea5p nh\u1eadn v\u00e0 gi\u1ea3m g\u00e1nh n\u1eb7ng cho b\u1ed9 ph\u1eadn h\u1ed7 tr\u1ee3.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img decoding=\"async\" src=\"https:\/\/pageloot.com\/wp-content\/uploads\/2026\/03\/simple-modern-flat-illustration-square-format-white-background-with-blue-and-l-1171-574c3ea8da68.webp\" alt=\"H\u01b0\u1edbng d\u1eabn qu\u00e9t QR\"\/><\/figure>\n\n\n\n<ul class=\"wp-block-list\">\n<li>  <strong>X\u00e1c minh mi\u1ec1n<\/strong>: \u0110\u00e0o t\u1ea1o ng\u01b0\u1eddi d\u00f9ng t\u00ecm bi\u1ec3u t\u01b0\u1ee3ng \u1ed5 kh\u00f3a v\u00e0 URL Salesforce ch\u00ednh th\u1ee9c tr\u01b0\u1edbc khi qu\u00e9t b\u1ea5t k\u1ef3 m\u00e3 \u0111\u0103ng k\u00fd n\u00e0o.<\/li>\n\n\n\n<li>  <strong>B\u00e1o c\u00e1o c\u00e1c b\u1ea5t th\u01b0\u1eddng<\/strong>: H\u01b0\u1edbng d\u1eabn ng\u01b0\u1eddi d\u00f9ng t\u1eeb ch\u1ed1i v\u00e0 b\u00e1o c\u00e1o b\u1ea5t k\u1ef3 th\u00f4ng b\u00e1o \u0111\u1ea9y MFA n\u00e0o h\u1ecd nh\u1eadn \u0111\u01b0\u1ee3c khi h\u1ecd kh\u00f4ng ch\u1ee7 \u0111\u1ed9ng c\u1ed1 g\u1eafng \u0111\u0103ng nh\u1eadp.<\/li>\n\n\n\n<li>  <strong>T\u00e0i li\u1ec7u h\u00f3a quy tr\u00ecnh<\/strong>: S\u1eed d\u1ee5ng <a href=\"https:\/\/pageloot.com\/vi\/qr-code-marketing\/static-vs-dynamic-qr-codes\/\">m\u00e3 QR t\u0129nh v\u00e0 \u0111\u1ed9ng<\/a> trong t\u00e0i li\u1ec7u \u0111\u00e0o t\u1ea1o c\u1ee7a b\u1ea1n \u0111\u1ec3 cung c\u1ea5p cho ng\u01b0\u1eddi d\u00f9ng c\u00e1c h\u01b0\u1edbng d\u1eabn video c\u1eadp nh\u1eadt kh\u00f4ng y\u00eau c\u1ea7u in l\u1ea1i khi giao di\u1ec7n ng\u01b0\u1eddi d\u00f9ng thay \u0111\u1ed5i.<\/li>\n\n\n\n<li>  <strong>Ti\u00eau chu\u1ea9n h\u00f3a vi\u1ec7c kh\u00f4i ph\u1ee5c<\/strong>: T\u1ea1o c\u00e1c k\u1ecbch b\u1ea3n cho b\u1ed9 ph\u1eadn h\u1ed7 tr\u1ee3 c\u1ee7a b\u1ea1n \u0111\u1ec3 x\u00e1c minh danh t\u00ednh tr\u01b0\u1edbc khi \u201cng\u1eaft k\u1ebft n\u1ed1i\u201d m\u1ed9t thi\u1ebft b\u1ecb b\u1ecb m\u1ea5t trong Salesforce, \u0111i\u1ec1u n\u00e0y cho ph\u00e9p ng\u01b0\u1eddi d\u00f9ng qu\u00e9t m\u00e3 \u0111\u0103ng k\u00fd m\u1edbi.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-faq\">C\u00e2u h\u1ecfi th\u01b0\u1eddng g\u1eb7p<\/h2>\n\n\n\n<div class=\"schema-faq wp-block-yoast-faq-block\"><div class=\"schema-faq-section\" id=\"faq-question-5be3828cb813\"><strong class=\"schema-faq-question\">T\u00f4i n\u00ean l\u00e0m g\u00ec n\u1ebfu ng\u01b0\u1eddi d\u00f9ng l\u00e0m m\u1ea5t thi\u1ebft b\u1ecb \u0111\u00e3 \u0111\u0103ng k\u00fd MFA c\u1ee7a h\u1ecd?<\/strong> <p class=\"schema-faq-answer\">\u0110i\u1ec1u h\u01b0\u1edbng \u0111\u1ebfn trang chi ti\u1ebft c\u1ee7a ng\u01b0\u1eddi d\u00f9ng trong Thi\u1ebft l\u1eadp Salesforce v\u00e0 nh\u1ea5p v\u00e0o \u201cNg\u1eaft k\u1ebft n\u1ed1i\u201d b\u00ean c\u1ea1nh \u0110\u0103ng k\u00fd \u1ee9ng d\u1ee5ng. H\u00e0nh \u0111\u1ed9ng n\u00e0y l\u00e0m m\u1ea5t hi\u1ec7u l\u1ef1c kh\u00f3a b\u00ed m\u1eadt c\u0169 v\u00e0 \u0111\u1ea3m b\u1ea3o thi\u1ebft b\u1ecb b\u1ecb m\u1ea5t kh\u00f4ng c\u00f2n c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng \u0111\u1ec3 x\u00e1c th\u1ef1c. L\u1ea7n t\u1edbi khi ng\u01b0\u1eddi d\u00f9ng \u0111\u0103ng nh\u1eadp, Salesforce s\u1ebd nh\u1eafc h\u1ecd qu\u00e9t m\u00e3 QR m\u1edbi \u0111\u1ec3 \u0111\u0103ng k\u00fd thi\u1ebft b\u1ecb thay th\u1ebf c\u1ee7a h\u1ecd.<\/p> <\/div> <div class=\"schema-faq-section\" id=\"faq-question-954cf832bc0f\"><strong class=\"schema-faq-question\">T\u00f4i c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng m\u00e1y qu\u00e9t m\u00e3 QR c\u1ee7a b\u00ean th\u1ee9 ba cho Salesforce MFA kh\u00f4ng?<\/strong> <p class=\"schema-faq-answer\">No, users should not use a general-purpose QR code scanner to register for MFA. They must use a dedicated TOTP authenticator app, such as Salesforce Authenticator, Google Authenticator, or Microsoft Authenticator. These apps are designed to securely process the secret key and generate the time-sensitive codes required for login.<\/p> <\/div> <div class=\"schema-faq-section\" id=\"faq-question-948d71da738e\"><strong class=\"schema-faq-question\">T\u1ea1i sao m\u00e3 QR MFA c\u1ee7a Salesforce c\u1ee7a t\u00f4i l\u1ea1i h\u1ebft h\u1ea1n nhanh nh\u01b0 v\u1eady?<\/strong> <p class=\"schema-faq-answer\">M\u00e3 QR \u0111\u0103ng k\u00fd l\u00e0 t\u1ea1m th\u1eddi v\u00ec l\u00fd do b\u1ea3o m\u1eadt. N\u1ebfu ng\u01b0\u1eddi d\u00f9ng ch\u1edd qu\u00e1 l\u00e2u \u0111\u1ec3 qu\u00e9t m\u00e3, phi\u00ean s\u1ebd h\u1ebft th\u1eddi gian \u0111\u1ec3 ng\u0103n kh\u00f3a b\u00ed m\u1eadt b\u1ecb ch\u1eb7n b\u1edfi m\u1ed9t b\u00ean tr\u00e1i ph\u00e9p. N\u1ebfu m\u00e3 h\u1ebft h\u1ea1n, ng\u01b0\u1eddi d\u00f9ng ch\u1ec9 c\u1ea7n l\u00e0m m\u1edbi trang \u0111\u0103ng nh\u1eadp c\u1ee7a h\u1ecd \u0111\u1ec3 t\u1ea1o m\u1ed9t m\u00e3 m\u1edbi, h\u1ee3p l\u1ec7 \u0111\u1ec3 \u0111\u0103ng k\u00fd.<\/p> <\/div> <\/div>","protected":false},"excerpt":{"rendered":"<p>Tri\u1ec3n khai MFA m\u00e3 QR Salesforce an to\u00e0n v\u1edbi c\u00e1c ph\u01b0\u01a1ng ph\u00e1p hay nh\u1ea5t d\u00e0nh cho qu\u1ea3n tr\u1ecb vi\u00ean n\u00e0y. Ng\u0103n ch\u1eb7n c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng quishing, qu\u1ea3n l\u00fd r\u1ee7i ro \u0111\u0103ng k\u00fd v\u00e0 t\u0103ng c\u01b0\u1eddng b\u1ea3o m\u1eadt \u0111\u0103ng nh\u1eadp.<\/p>","protected":false},"author":17,"featured_media":50416,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[2635],"tags":[],"class_list":["post-48054","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blog"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v24.7 (Yoast SEO v27.8) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Secure Salesforce QR Code MFA: Admin Best Practices<\/title>\n<meta name=\"description\" content=\"Implement secure Salesforce QR code MFA with these admin best practices. Prevent quishing attacks, manage enrollment risks, and harden login security.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/pageloot.com\/vi\/blog\/salesforce-qr-code-authentication-best-practices\/\" \/>\n<meta property=\"og:locale\" content=\"vi_VN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Secure Salesforce QR Code MFA: Admin Best Practices\" \/>\n<meta property=\"og:description\" content=\"Implement secure Salesforce QR code MFA with these admin best practices. Prevent quishing attacks, manage enrollment risks, and harden login security.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/pageloot.com\/vi\/blog\/salesforce-qr-code-authentication-best-practices\/\" \/>\n<meta property=\"og:site_name\" content=\"Pageloot\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/pageloot\/\" \/>\n<meta property=\"article:published_time\" content=\"2025-12-05T02:24:21+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-05-20T10:33:44+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/pageloot.com\/wp-content\/uploads\/2026\/03\/photorealistic-office-lifestyle-scene-of-a-cybersecurity-or-it-administrator-set-7485-6ff312bb531e.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1408\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Siim T\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@getpageloot\" \/>\n<meta name=\"twitter:site\" content=\"@getpageloot\" \/>\n<meta name=\"twitter:label1\" content=\"\u0110\u01b0\u1ee3c vi\u1ebft b\u1edfi\" \/>\n\t<meta name=\"twitter:data1\" content=\"Siim T\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u01af\u1edbc t\u00ednh th\u1eddi gian \u0111\u1ecdc\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 ph\u00fat\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/pageloot.com\\\/blog\\\/salesforce-qr-code-authentication-best-practices\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/pageloot.com\\\/blog\\\/salesforce-qr-code-authentication-best-practices\\\/\"},\"author\":{\"name\":\"Siim T\",\"@id\":\"https:\\\/\\\/pageloot.com\\\/es\\\/#\\\/schema\\\/person\\\/fa28992c2e52546f0812833bac852dfe\"},\"headline\":\"Secure Salesforce QR Code MFA: Admin Best Practices\",\"datePublished\":\"2025-12-05T02:24:21+00:00\",\"dateModified\":\"2026-05-20T10:33:44+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/pageloot.com\\\/blog\\\/salesforce-qr-code-authentication-best-practices\\\/\"},\"wordCount\":1107,\"publisher\":{\"@id\":\"https:\\\/\\\/pageloot.com\\\/es\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/pageloot.com\\\/blog\\\/salesforce-qr-code-authentication-best-practices\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/pageloot.com\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/photorealistic-office-lifestyle-scene-of-a-cybersecurity-or-it-administrator-set-7485-6ff312bb531e.webp\",\"articleSection\":[\"Blog\"],\"inLanguage\":\"vi\"},{\"@type\":[\"WebPage\",\"FAQPage\"],\"@id\":\"https:\\\/\\\/pageloot.com\\\/blog\\\/salesforce-qr-code-authentication-best-practices\\\/\",\"url\":\"https:\\\/\\\/pageloot.com\\\/blog\\\/salesforce-qr-code-authentication-best-practices\\\/\",\"name\":\"Secure Salesforce QR Code MFA: Admin Best Practices\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/pageloot.com\\\/es\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/pageloot.com\\\/blog\\\/salesforce-qr-code-authentication-best-practices\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/pageloot.com\\\/blog\\\/salesforce-qr-code-authentication-best-practices\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/pageloot.com\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/photorealistic-office-lifestyle-scene-of-a-cybersecurity-or-it-administrator-set-7485-6ff312bb531e.webp\",\"datePublished\":\"2025-12-05T02:24:21+00:00\",\"dateModified\":\"2026-05-20T10:33:44+00:00\",\"description\":\"Implement secure Salesforce QR code MFA with these admin best practices. Prevent quishing attacks, manage enrollment risks, and harden login security.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/pageloot.com\\\/blog\\\/salesforce-qr-code-authentication-best-practices\\\/#breadcrumb\"},\"mainEntity\":[{\"@id\":\"https:\\\/\\\/pageloot.com\\\/blog\\\/salesforce-qr-code-authentication-best-practices\\\/#faq-question-5be3828cb813\"},{\"@id\":\"https:\\\/\\\/pageloot.com\\\/blog\\\/salesforce-qr-code-authentication-best-practices\\\/#faq-question-954cf832bc0f\"},{\"@id\":\"https:\\\/\\\/pageloot.com\\\/blog\\\/salesforce-qr-code-authentication-best-practices\\\/#faq-question-948d71da738e\"}],\"inLanguage\":\"vi\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/pageloot.com\\\/blog\\\/salesforce-qr-code-authentication-best-practices\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"vi\",\"@id\":\"https:\\\/\\\/pageloot.com\\\/blog\\\/salesforce-qr-code-authentication-best-practices\\\/#primaryimage\",\"url\":\"https:\\\/\\\/pageloot.com\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/photorealistic-office-lifestyle-scene-of-a-cybersecurity-or-it-administrator-set-7485-6ff312bb531e.webp\",\"contentUrl\":\"https:\\\/\\\/pageloot.com\\\/wp-content\\\/uploads\\\/2026\\\/03\\\/photorealistic-office-lifestyle-scene-of-a-cybersecurity-or-it-administrator-set-7485-6ff312bb531e.webp\",\"width\":1408,\"height\":768,\"caption\":\"Salesforce MFA setup\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/pageloot.com\\\/blog\\\/salesforce-qr-code-authentication-best-practices\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/pageloot.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Blog\",\"item\":\"https:\\\/\\\/pageloot.com\\\/c\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Secure Salesforce QR Code MFA: Admin Best Practices\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/pageloot.com\\\/es\\\/#website\",\"url\":\"https:\\\/\\\/pageloot.com\\\/es\\\/\",\"name\":\"Pageloot\",\"description\":\"Create Free QR Codes Online\",\"publisher\":{\"@id\":\"https:\\\/\\\/pageloot.com\\\/es\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/pageloot.com\\\/es\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"vi\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/pageloot.com\\\/es\\\/#organization\",\"name\":\"Pageloot\",\"url\":\"https:\\\/\\\/pageloot.com\\\/es\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"vi\",\"@id\":\"https:\\\/\\\/pageloot.com\\\/es\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/pageloot.com\\\/wp-content\\\/uploads\\\/2020\\\/03\\\/Pageloot-QR-Code-Generator-Scanner-Tools-Online.svg\",\"contentUrl\":\"https:\\\/\\\/pageloot.com\\\/wp-content\\\/uploads\\\/2020\\\/03\\\/Pageloot-QR-Code-Generator-Scanner-Tools-Online.svg\",\"width\":1,\"height\":1,\"caption\":\"Pageloot\"},\"image\":{\"@id\":\"https:\\\/\\\/pageloot.com\\\/es\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/pageloot\\\/\",\"https:\\\/\\\/x.com\\\/getpageloot\",\"https:\\\/\\\/www.instagram.com\\\/getpageloot\\\/\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/pageloot\\\/\",\"http:\\\/\\\/pinterest.com\\\/pageloot\",\"https:\\\/\\\/www.youtube.com\\\/pageloot\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/pageloot.com\\\/es\\\/#\\\/schema\\\/person\\\/fa28992c2e52546f0812833bac852dfe\",\"name\":\"Siim T\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"vi\",\"@id\":\"https:\\\/\\\/pageloot.com\\\/wp-content\\\/litespeed\\\/avatar\\\/b08b5ea4331bae7b2040ada99100c9df.jpg?ver=1783454290\",\"url\":\"https:\\\/\\\/pageloot.com\\\/wp-content\\\/litespeed\\\/avatar\\\/b08b5ea4331bae7b2040ada99100c9df.jpg?ver=1783454290\",\"contentUrl\":\"https:\\\/\\\/pageloot.com\\\/wp-content\\\/litespeed\\\/avatar\\\/b08b5ea4331bae7b2040ada99100c9df.jpg?ver=1783454290\",\"caption\":\"Siim T\"},\"description\":\"Siim Tiigim\u00e4gi is a part of the innovative QR code generator services at Pageloot. With a profound expertise spanning over 5 years solely on QR codes, Siim has become a subject matter expert in the field. He makes significant strides in leveraging QR technology to simplify and augment digital interactions. His journey didn\u2019t just start here. Siim has an extensive digital background with over 10 years of robust experience in the Software as a Service (SaaS) sector, a testament to his deep-seated knowledge in digital solutions.\",\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/in\\\/siim-tiigimagi\\\/\"]},{\"@type\":\"Question\",\"@id\":\"https:\\\/\\\/pageloot.com\\\/blog\\\/salesforce-qr-code-authentication-best-practices\\\/#faq-question-5be3828cb813\",\"position\":1,\"url\":\"https:\\\/\\\/pageloot.com\\\/blog\\\/salesforce-qr-code-authentication-best-practices\\\/#faq-question-5be3828cb813\",\"name\":\"What should I do if a user loses their MFA-registered device?\",\"answerCount\":1,\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Navigate to the user's detail page in Salesforce Setup and click u005cu0022Disconnectu005cu0022 next to the App Registration. This action invalidates the old secret key and ensures the lost device can no longer be used for authentication. The next time the user logs in, Salesforce prompts them to scan a new QR code to register their replacement device.\",\"inLanguage\":\"vi\"},\"inLanguage\":\"vi\"},{\"@type\":\"Question\",\"@id\":\"https:\\\/\\\/pageloot.com\\\/blog\\\/salesforce-qr-code-authentication-best-practices\\\/#faq-question-954cf832bc0f\",\"position\":2,\"url\":\"https:\\\/\\\/pageloot.com\\\/blog\\\/salesforce-qr-code-authentication-best-practices\\\/#faq-question-954cf832bc0f\",\"name\":\"Can I use a third-party QR scanner for Salesforce MFA?\",\"answerCount\":1,\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"No, users should not use a general-purpose QR code scanner to register for MFA. They must use a dedicated TOTP authenticator app, such as Salesforce Authenticator, Google Authenticator, or Microsoft Authenticator. These apps are designed to securely process the secret key and generate the time-sensitive codes required for login.\",\"inLanguage\":\"vi\"},\"inLanguage\":\"vi\"},{\"@type\":\"Question\",\"@id\":\"https:\\\/\\\/pageloot.com\\\/blog\\\/salesforce-qr-code-authentication-best-practices\\\/#faq-question-948d71da738e\",\"position\":3,\"url\":\"https:\\\/\\\/pageloot.com\\\/blog\\\/salesforce-qr-code-authentication-best-practices\\\/#faq-question-948d71da738e\",\"name\":\"Why does my Salesforce MFA QR code expire so quickly?\",\"answerCount\":1,\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Enrollment QR codes are temporary for security reasons. If a user waits too long to scan the code, the session times out to prevent the secret key from being intercepted by an unauthorized party. If a code expires, the user simply needs to refresh their login page to generate a fresh, valid code for registration.\",\"inLanguage\":\"vi\"},\"inLanguage\":\"vi\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"B\u1ea3o m\u1eadt Salesforce MFA m\u00e3 QR: C\u00e1c ph\u01b0\u01a1ng ph\u00e1p hay nh\u1ea5t d\u00e0nh cho qu\u1ea3n tr\u1ecb vi\u00ean","description":"Tri\u1ec3n khai MFA m\u00e3 QR Salesforce an to\u00e0n v\u1edbi c\u00e1c ph\u01b0\u01a1ng ph\u00e1p hay nh\u1ea5t d\u00e0nh cho qu\u1ea3n tr\u1ecb vi\u00ean n\u00e0y. Ng\u0103n ch\u1eb7n c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng quishing, qu\u1ea3n l\u00fd r\u1ee7i ro \u0111\u0103ng k\u00fd v\u00e0 t\u0103ng c\u01b0\u1eddng b\u1ea3o m\u1eadt \u0111\u0103ng nh\u1eadp.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/pageloot.com\/vi\/blog\/salesforce-qr-code-authentication-best-practices\/","og_locale":"vi_VN","og_type":"article","og_title":"Secure Salesforce QR Code MFA: Admin Best Practices","og_description":"Implement secure Salesforce QR code MFA with these admin best practices. Prevent quishing attacks, manage enrollment risks, and harden login security.","og_url":"https:\/\/pageloot.com\/vi\/blog\/salesforce-qr-code-authentication-best-practices\/","og_site_name":"Pageloot","article_publisher":"https:\/\/www.facebook.com\/pageloot\/","article_published_time":"2025-12-05T02:24:21+00:00","article_modified_time":"2026-05-20T10:33:44+00:00","og_image":[{"width":1408,"height":768,"url":"https:\/\/pageloot.com\/wp-content\/uploads\/2026\/03\/photorealistic-office-lifestyle-scene-of-a-cybersecurity-or-it-administrator-set-7485-6ff312bb531e.webp","type":"image\/webp"}],"author":"Siim T","twitter_card":"summary_large_image","twitter_creator":"@getpageloot","twitter_site":"@getpageloot","twitter_misc":{"\u0110\u01b0\u1ee3c vi\u1ebft b\u1edfi":"Siim T","\u01af\u1edbc t\u00ednh th\u1eddi gian \u0111\u1ecdc":"5 ph\u00fat"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/pageloot.com\/blog\/salesforce-qr-code-authentication-best-practices\/#article","isPartOf":{"@id":"https:\/\/pageloot.com\/blog\/salesforce-qr-code-authentication-best-practices\/"},"author":{"name":"Siim T","@id":"https:\/\/pageloot.com\/es\/#\/schema\/person\/fa28992c2e52546f0812833bac852dfe"},"headline":"Secure Salesforce QR Code MFA: Admin Best Practices","datePublished":"2025-12-05T02:24:21+00:00","dateModified":"2026-05-20T10:33:44+00:00","mainEntityOfPage":{"@id":"https:\/\/pageloot.com\/blog\/salesforce-qr-code-authentication-best-practices\/"},"wordCount":1107,"publisher":{"@id":"https:\/\/pageloot.com\/es\/#organization"},"image":{"@id":"https:\/\/pageloot.com\/blog\/salesforce-qr-code-authentication-best-practices\/#primaryimage"},"thumbnailUrl":"https:\/\/pageloot.com\/wp-content\/uploads\/2026\/03\/photorealistic-office-lifestyle-scene-of-a-cybersecurity-or-it-administrator-set-7485-6ff312bb531e.webp","articleSection":["Blog"],"inLanguage":"vi"},{"@type":["WebPage","FAQPage"],"@id":"https:\/\/pageloot.com\/blog\/salesforce-qr-code-authentication-best-practices\/","url":"https:\/\/pageloot.com\/blog\/salesforce-qr-code-authentication-best-practices\/","name":"B\u1ea3o m\u1eadt Salesforce MFA m\u00e3 QR: C\u00e1c ph\u01b0\u01a1ng ph\u00e1p hay nh\u1ea5t d\u00e0nh cho qu\u1ea3n tr\u1ecb vi\u00ean","isPartOf":{"@id":"https:\/\/pageloot.com\/es\/#website"},"primaryImageOfPage":{"@id":"https:\/\/pageloot.com\/blog\/salesforce-qr-code-authentication-best-practices\/#primaryimage"},"image":{"@id":"https:\/\/pageloot.com\/blog\/salesforce-qr-code-authentication-best-practices\/#primaryimage"},"thumbnailUrl":"https:\/\/pageloot.com\/wp-content\/uploads\/2026\/03\/photorealistic-office-lifestyle-scene-of-a-cybersecurity-or-it-administrator-set-7485-6ff312bb531e.webp","datePublished":"2025-12-05T02:24:21+00:00","dateModified":"2026-05-20T10:33:44+00:00","description":"Tri\u1ec3n khai MFA m\u00e3 QR Salesforce an to\u00e0n v\u1edbi c\u00e1c ph\u01b0\u01a1ng ph\u00e1p hay nh\u1ea5t d\u00e0nh cho qu\u1ea3n tr\u1ecb vi\u00ean n\u00e0y. Ng\u0103n ch\u1eb7n c\u00e1c cu\u1ed9c t\u1ea5n c\u00f4ng quishing, qu\u1ea3n l\u00fd r\u1ee7i ro \u0111\u0103ng k\u00fd v\u00e0 t\u0103ng c\u01b0\u1eddng b\u1ea3o m\u1eadt \u0111\u0103ng nh\u1eadp.","breadcrumb":{"@id":"https:\/\/pageloot.com\/blog\/salesforce-qr-code-authentication-best-practices\/#breadcrumb"},"mainEntity":[{"@id":"https:\/\/pageloot.com\/blog\/salesforce-qr-code-authentication-best-practices\/#faq-question-5be3828cb813"},{"@id":"https:\/\/pageloot.com\/blog\/salesforce-qr-code-authentication-best-practices\/#faq-question-954cf832bc0f"},{"@id":"https:\/\/pageloot.com\/blog\/salesforce-qr-code-authentication-best-practices\/#faq-question-948d71da738e"}],"inLanguage":"vi","potentialAction":[{"@type":"ReadAction","target":["https:\/\/pageloot.com\/blog\/salesforce-qr-code-authentication-best-practices\/"]}]},{"@type":"ImageObject","inLanguage":"vi","@id":"https:\/\/pageloot.com\/blog\/salesforce-qr-code-authentication-best-practices\/#primaryimage","url":"https:\/\/pageloot.com\/wp-content\/uploads\/2026\/03\/photorealistic-office-lifestyle-scene-of-a-cybersecurity-or-it-administrator-set-7485-6ff312bb531e.webp","contentUrl":"https:\/\/pageloot.com\/wp-content\/uploads\/2026\/03\/photorealistic-office-lifestyle-scene-of-a-cybersecurity-or-it-administrator-set-7485-6ff312bb531e.webp","width":1408,"height":768,"caption":"Salesforce MFA setup"},{"@type":"BreadcrumbList","@id":"https:\/\/pageloot.com\/blog\/salesforce-qr-code-authentication-best-practices\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/pageloot.com\/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https:\/\/pageloot.com\/c\/blog\/"},{"@type":"ListItem","position":3,"name":"Secure Salesforce QR Code MFA: Admin Best Practices"}]},{"@type":"WebSite","@id":"https:\/\/pageloot.com\/es\/#website","url":"https:\/\/pageloot.com\/es\/","name":"Pageloot","description":"T\u1ea1o m\u00e3 QR mi\u1ec5n ph\u00ed tr\u1ef1c tuy\u1ebfn","publisher":{"@id":"https:\/\/pageloot.com\/es\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/pageloot.com\/es\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"vi"},{"@type":"Organization","@id":"https:\/\/pageloot.com\/es\/#organization","name":"Pageloot","url":"https:\/\/pageloot.com\/es\/","logo":{"@type":"ImageObject","inLanguage":"vi","@id":"https:\/\/pageloot.com\/es\/#\/schema\/logo\/image\/","url":"https:\/\/pageloot.com\/wp-content\/uploads\/2020\/03\/Pageloot-QR-Code-Generator-Scanner-Tools-Online.svg","contentUrl":"https:\/\/pageloot.com\/wp-content\/uploads\/2020\/03\/Pageloot-QR-Code-Generator-Scanner-Tools-Online.svg","width":1,"height":1,"caption":"Pageloot"},"image":{"@id":"https:\/\/pageloot.com\/es\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/pageloot\/","https:\/\/x.com\/getpageloot","https:\/\/www.instagram.com\/getpageloot\/","https:\/\/www.linkedin.com\/company\/pageloot\/","http:\/\/pinterest.com\/pageloot","https:\/\/www.youtube.com\/pageloot"]},{"@type":"Person","@id":"https:\/\/pageloot.com\/es\/#\/schema\/person\/fa28992c2e52546f0812833bac852dfe","name":"Siim T","image":{"@type":"ImageObject","inLanguage":"vi","@id":"https:\/\/pageloot.com\/wp-content\/litespeed\/avatar\/b08b5ea4331bae7b2040ada99100c9df.jpg?ver=1783454290","url":"https:\/\/pageloot.com\/wp-content\/litespeed\/avatar\/b08b5ea4331bae7b2040ada99100c9df.jpg?ver=1783454290","contentUrl":"https:\/\/pageloot.com\/wp-content\/litespeed\/avatar\/b08b5ea4331bae7b2040ada99100c9df.jpg?ver=1783454290","caption":"Siim T"},"description":"Siim Tiigim\u00e4gi l\u00e0 m\u1ed9t ph\u1ea7n c\u1ee7a d\u1ecbch v\u1ee5 t\u1ea1o m\u00e3 QR s\u00e1ng t\u1ea1o t\u1ea1i Pageloot. V\u1edbi chuy\u00ean m\u00f4n s\u00e2u s\u1eafc k\u00e9o d\u00e0i h\u01a1n 5 n\u0103m ch\u1ec9 v\u1ec1 m\u00e3 QR, Siim \u0111\u00e3 tr\u1edf th\u00e0nh m\u1ed9t chuy\u00ean gia v\u1ec1 ch\u1ee7 \u0111\u1ec1 n\u00e0y trong l\u0129nh v\u1ef1c n\u00e0y. Anh \u1ea5y \u0111\u00e3 c\u00f3 nh\u1eefng b\u01b0\u1edbc ti\u1ebfn \u0111\u00e1ng k\u1ec3 trong vi\u1ec7c t\u1eadn d\u1ee5ng c\u00f4ng ngh\u1ec7 QR \u0111\u1ec3 \u0111\u01a1n gi\u1ea3n h\u00f3a v\u00e0 t\u0103ng c\u01b0\u1eddng c\u00e1c t\u01b0\u01a1ng t\u00e1c k\u1ef9 thu\u1eadt s\u1ed1. Cu\u1ed9c h\u00e0nh tr\u00ecnh c\u1ee7a anh kh\u00f4ng ch\u1ec9 b\u1eaft \u0111\u1ea7u \u1edf \u0111\u00e2y. Siim c\u00f3 n\u1ec1n t\u1ea3ng k\u1ef9 thu\u1eadt s\u1ed1 s\u00e2u r\u1ed9ng v\u1edbi h\u01a1n 10 n\u0103m kinh nghi\u1ec7m v\u1eefng ch\u1eafc trong l\u0129nh v\u1ef1c Ph\u1ea7n m\u1ec1m d\u01b0\u1edbi d\u1ea1ng d\u1ecbch v\u1ee5 (SaaS), m\u1ed9t minh ch\u1ee9ng cho ki\u1ebfn th\u1ee9c s\u00e2u r\u1ed9ng c\u1ee7a \u00f4ng v\u1ec1 c\u00e1c gi\u1ea3i ph\u00e1p k\u1ef9 thu\u1eadt s\u1ed1.","sameAs":["https:\/\/www.linkedin.com\/in\/siim-tiigimagi\/"]},{"@type":"Question","@id":"https:\/\/pageloot.com\/blog\/salesforce-qr-code-authentication-best-practices\/#faq-question-5be3828cb813","position":1,"url":"https:\/\/pageloot.com\/blog\/salesforce-qr-code-authentication-best-practices\/#faq-question-5be3828cb813","name":"T\u00f4i n\u00ean l\u00e0m g\u00ec n\u1ebfu ng\u01b0\u1eddi d\u00f9ng l\u00e0m m\u1ea5t thi\u1ebft b\u1ecb \u0111\u00e3 \u0111\u0103ng k\u00fd MFA c\u1ee7a h\u1ecd?","answerCount":1,"acceptedAnswer":{"@type":"Answer","text":"Navigate to the user's detail page in Salesforce Setup and click u005cu0022Disconnectu005cu0022 next to the App Registration. This action invalidates the old secret key and ensures the lost device can no longer be used for authentication. The next time the user logs in, Salesforce prompts them to scan a new QR code to register their replacement device.","inLanguage":"vi"},"inLanguage":"vi"},{"@type":"Question","@id":"https:\/\/pageloot.com\/blog\/salesforce-qr-code-authentication-best-practices\/#faq-question-954cf832bc0f","position":2,"url":"https:\/\/pageloot.com\/blog\/salesforce-qr-code-authentication-best-practices\/#faq-question-954cf832bc0f","name":"T\u00f4i c\u00f3 th\u1ec3 s\u1eed d\u1ee5ng m\u00e1y qu\u00e9t m\u00e3 QR c\u1ee7a b\u00ean th\u1ee9 ba cho Salesforce MFA kh\u00f4ng?","answerCount":1,"acceptedAnswer":{"@type":"Answer","text":"No, users should not use a general-purpose QR code scanner to register for MFA. They must use a dedicated TOTP authenticator app, such as Salesforce Authenticator, Google Authenticator, or Microsoft Authenticator. These apps are designed to securely process the secret key and generate the time-sensitive codes required for login.","inLanguage":"vi"},"inLanguage":"vi"},{"@type":"Question","@id":"https:\/\/pageloot.com\/blog\/salesforce-qr-code-authentication-best-practices\/#faq-question-948d71da738e","position":3,"url":"https:\/\/pageloot.com\/blog\/salesforce-qr-code-authentication-best-practices\/#faq-question-948d71da738e","name":"T\u1ea1i sao m\u00e3 QR MFA c\u1ee7a Salesforce c\u1ee7a t\u00f4i l\u1ea1i h\u1ebft h\u1ea1n nhanh nh\u01b0 v\u1eady?","answerCount":1,"acceptedAnswer":{"@type":"Answer","text":"Enrollment QR codes are temporary for security reasons. If a user waits too long to scan the code, the session times out to prevent the secret key from being intercepted by an unauthorized party. If a code expires, the user simply needs to refresh their login page to generate a fresh, valid code for registration.","inLanguage":"vi"},"inLanguage":"vi"}]}},"_links":{"self":[{"href":"https:\/\/pageloot.com\/vi\/wp-json\/wp\/v2\/posts\/48054","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pageloot.com\/vi\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pageloot.com\/vi\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pageloot.com\/vi\/wp-json\/wp\/v2\/users\/17"}],"replies":[{"embeddable":true,"href":"https:\/\/pageloot.com\/vi\/wp-json\/wp\/v2\/comments?post=48054"}],"version-history":[{"count":5,"href":"https:\/\/pageloot.com\/vi\/wp-json\/wp\/v2\/posts\/48054\/revisions"}],"predecessor-version":[{"id":54046,"href":"https:\/\/pageloot.com\/vi\/wp-json\/wp\/v2\/posts\/48054\/revisions\/54046"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/pageloot.com\/vi\/wp-json\/wp\/v2\/media\/50416"}],"wp:attachment":[{"href":"https:\/\/pageloot.com\/vi\/wp-json\/wp\/v2\/media?parent=48054"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pageloot.com\/vi\/wp-json\/wp\/v2\/categories?post=48054"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pageloot.com\/vi\/wp-json\/wp\/v2\/tags?post=48054"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}