Implementing a post-login Action to enforce a custom Multi-Factor Authentication (MFA) policy removes the Remember this device for 30 days option from the MFA challenge screen. Users will not encounter the Remember this device for 30 days option during the MFA challenge process.

• Auth0
• Multi-Factor Authentication (MFA)
• Universal Login

How is the "Remember this device for 30 days" option disabled?

Create and deploy a custom post-login Action in the Auth0 dashboard to enforce a custom MFA policy without the remember browser option.

1. Navigate to the Auth0 Dashboard, select Actions from the side menu, and choose Library.
2. Click Create Action and select Build from scratch.

3. Enter a descriptive name for the action in the Name field, set the Trigger field to Login / Post Login, choose the newest node version for the Runtime, and click Create.
4. Paste the following Action code into the editor:

   exports.onExecutePostLogin = async (event, api) => {
     api.multifactor.enable("any",{allowRememberBrowser:false});
   }

5. Click Save Draft and select Deploy.
6. Return to the Actions menu and select Flows.
7. Click Login.
8. Under Add Actions on the right side of the screen, click Custom.
9. Drag and drop the previously created Action to the position between Start and Complete.

10. Click Apply to enforce the changes.

Related References

• Customize MFA Policy with Actions
• Change Frequency of MFA Prompts
• Login Flow API Object