> For the complete documentation index, see [llms.txt](https://karansingh.gitbook.io/aws-saa-c02/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://karansingh.gitbook.io/aws-saa-c02/advanced-s3-and-athena/mfa-delete.md).

# MFA Delete

* You can optionally **add another layer of security by configuring a bucket to enable MFA Delete**, which **requires additional authentication for either of the following operations:**

  * **Change the versioning state of your bucket**.
  * **Permanently delete an object version**.

* MFA Delete **requires two forms of authentication together:**

  * Your **security credentials**.
  * The **concatenation of a valid serial number, a space, and the six-digit code displayed on an approved authentication device**.

* MFA Delete thus **provides added security in the event, for example, your security credentials are compromised**.

* **Only the bucket owner can enable and disable** MFA Delete.