---
title: "Offline Windows Multi-Factor Authentication (MFA) | UserLock"
description: "UserLock’s Offline Windows MFA allows you to secure AD identity login, even when they don’t have internet access or access to the domain."
locale: "en"
updated_at: "2026-04-15T13:55:18.205Z"
canonical: "https://www.isdecisions.com/en/userlock/features/mfa-for-offline-and-off-domain-windows-logins"
---

# Offline Windows Multi-Factor Authentication (MFA)

Secure offline, off-domain Windows user logins with UserLock MFA.

- Secure remote workforce access
- Satisfy compliance and insurance requirements
- Provide consistent access security, both on and off-site
- Combine with granular access controls

#### Ensure MFA all the time, everywhere

- Quick configuration
- Easy adoption
- Effective security

#### Maintain MFA without an internet connection

UserLock’s granular settings allow admins to ask for MFA on logons without an internet connection or in air-gapped environments. 

This applies to users who are already enrolled in MFA, on machines where the UserLock desktop agent is already installed.

#### Enforce MFA without access to the corporate domain

UserLock Anywhere allows the UserLock agent to contact the service through the internet when the network connection is not established. 

This allows UserLock to work exactly the same for all of your users, even without access to the corporate domain.

## Watch how UserLock secures remote off-domain access

## Choose up to two MFA methods for your team

Make MFA easy for your team to live with. Balance risk and usability by offering flexible [MFA methods](/userlock/features/mfa-methods) that fit your offline scenarios:

- Push notifications
- Hardware tokens and keys
- Authenticator apps