World map

 

BM

World A1: Renting a Unit

Root user, MFA and account safety

You will learn: why the root user stays locked away, and how MFA guards it.

Checked with AWS 2026-11 on 1 Nov 2026

The problem

The mall hands you a master key. It opens your unit, your safe and your bill. Where should it live?

Watch

Tap each point on the timeline.

The root user: The master key made when you open the account. It opens everything, so lock it away. is that master key. Tap each step of day one.

Watch

MFA (multi-factor authentication): A second lock: after the password, you also show a code or a security key. adds a second lock. After the password, you show something you hold. Which second lock does AWS like best?

Try it

Only a few jobs need the master key. Sort each job.

Drag a card into a box. Or tap the card, then tap the box.

      Predict

      You want to use the AWS command line as root. Should you make root access keys?

      Check

      Safe habit, or needs work? Swipe each one.

      Swipe right for good, left for needs work. Or use the buttons.

      1 / 4

      Use a shared team email for the root user.

      You did it!

      You can now lock the root user away, behind MFA.

      Go deeper (optional)

      You can register up to eight MFA devices for root. Keep the account’s email and phone number current. You need both to recover a lost MFA.

      Real rep (only if you already have an AWS account; no resources, no cost):

      Real mission

      0 of 6 steps done · Your ticks are saved.