diff --git a/content/vault/v1.14.x/content/docs/auth/login-mfa/index.mdx b/content/vault/v1.14.x/content/docs/auth/login-mfa/index.mdx
index f1dcd0f66b..787be7ab55 100644
--- a/content/vault/v1.14.x/content/docs/auth/login-mfa/index.mdx
+++ b/content/vault/v1.14.x/content/docs/auth/login-mfa/index.mdx
@@ -108,6 +108,11 @@ $ curl \
http://127.0.0.1:8200/v1/auth/userpass/login/alice
```
+Use the `-mfa` CLI flag or `VAULT_MFA` environment variable to pass in MFA credentials. For example:
+
+- CLI flag: `-mfa "d16fd3c2-50de-0b9b-eed3-0301dadeca10:695452"`
+- Environment variable: `export VAULT_MFA="d16fd3c2-50de-0b9b-eed3-0301dadeca10:695452"`
+
### Two-Phase login
The more conventional and prevalent MFA method is a two-request mechanism, also referred to as Two-phase Login MFA.
diff --git a/content/vault/v1.15.x/content/docs/auth/login-mfa/index.mdx b/content/vault/v1.15.x/content/docs/auth/login-mfa/index.mdx
index f1dcd0f66b..787be7ab55 100644
--- a/content/vault/v1.15.x/content/docs/auth/login-mfa/index.mdx
+++ b/content/vault/v1.15.x/content/docs/auth/login-mfa/index.mdx
@@ -108,6 +108,11 @@ $ curl \
http://127.0.0.1:8200/v1/auth/userpass/login/alice
```
+Use the `-mfa` CLI flag or `VAULT_MFA` environment variable to pass in MFA credentials. For example:
+
+- CLI flag: `-mfa "d16fd3c2-50de-0b9b-eed3-0301dadeca10:695452"`
+- Environment variable: `export VAULT_MFA="d16fd3c2-50de-0b9b-eed3-0301dadeca10:695452"`
+
### Two-Phase login
The more conventional and prevalent MFA method is a two-request mechanism, also referred to as Two-phase Login MFA.
diff --git a/content/vault/v1.16.x/content/docs/auth/login-mfa/index.mdx b/content/vault/v1.16.x/content/docs/auth/login-mfa/index.mdx
index f1dcd0f66b..787be7ab55 100644
--- a/content/vault/v1.16.x/content/docs/auth/login-mfa/index.mdx
+++ b/content/vault/v1.16.x/content/docs/auth/login-mfa/index.mdx
@@ -108,6 +108,11 @@ $ curl \
http://127.0.0.1:8200/v1/auth/userpass/login/alice
```
+Use the `-mfa` CLI flag or `VAULT_MFA` environment variable to pass in MFA credentials. For example:
+
+- CLI flag: `-mfa "d16fd3c2-50de-0b9b-eed3-0301dadeca10:695452"`
+- Environment variable: `export VAULT_MFA="d16fd3c2-50de-0b9b-eed3-0301dadeca10:695452"`
+
### Two-Phase login
The more conventional and prevalent MFA method is a two-request mechanism, also referred to as Two-phase Login MFA.
diff --git a/content/vault/v1.17.x/content/docs/auth/login-mfa/index.mdx b/content/vault/v1.17.x/content/docs/auth/login-mfa/index.mdx
index f1dcd0f66b..787be7ab55 100644
--- a/content/vault/v1.17.x/content/docs/auth/login-mfa/index.mdx
+++ b/content/vault/v1.17.x/content/docs/auth/login-mfa/index.mdx
@@ -108,6 +108,11 @@ $ curl \
http://127.0.0.1:8200/v1/auth/userpass/login/alice
```
+Use the `-mfa` CLI flag or `VAULT_MFA` environment variable to pass in MFA credentials. For example:
+
+- CLI flag: `-mfa "d16fd3c2-50de-0b9b-eed3-0301dadeca10:695452"`
+- Environment variable: `export VAULT_MFA="d16fd3c2-50de-0b9b-eed3-0301dadeca10:695452"`
+
### Two-Phase login
The more conventional and prevalent MFA method is a two-request mechanism, also referred to as Two-phase Login MFA.
diff --git a/content/vault/v1.18.x/content/docs/auth/login-mfa/index.mdx b/content/vault/v1.18.x/content/docs/auth/login-mfa/index.mdx
index d6d0798f9f..00460bcc7c 100644
--- a/content/vault/v1.18.x/content/docs/auth/login-mfa/index.mdx
+++ b/content/vault/v1.18.x/content/docs/auth/login-mfa/index.mdx
@@ -112,6 +112,11 @@ $ curl \
http://127.0.0.1:8200/v1/auth/userpass/login/alice
```
+Use the `-mfa` CLI flag or `VAULT_MFA` environment variable to pass in MFA credentials. For example:
+
+- CLI flag: `-mfa "d16fd3c2-50de-0b9b-eed3-0301dadeca10:695452"`
+- Environment variable: `export VAULT_MFA="d16fd3c2-50de-0b9b-eed3-0301dadeca10:695452"`
+
### Two-Phase login
The more conventional and prevalent MFA method is a two-request mechanism, also referred to as Two-phase Login MFA.
diff --git a/content/vault/v1.19.x/content/docs/auth/login-mfa/index.mdx b/content/vault/v1.19.x/content/docs/auth/login-mfa/index.mdx
index 683ad116bd..9ba3a6fc21 100644
--- a/content/vault/v1.19.x/content/docs/auth/login-mfa/index.mdx
+++ b/content/vault/v1.19.x/content/docs/auth/login-mfa/index.mdx
@@ -112,6 +112,11 @@ $ curl \
http://127.0.0.1:8200/v1/auth/userpass/login/alice
```
+Use the `-mfa` CLI flag or `VAULT_MFA` environment variable to pass in MFA credentials. For example:
+
+- CLI flag: `-mfa "d16fd3c2-50de-0b9b-eed3-0301dadeca10:695452"`
+- Environment variable: `export VAULT_MFA="d16fd3c2-50de-0b9b-eed3-0301dadeca10:695452"`
+
### Two-Phase login
The more conventional and prevalent MFA method is a two-request mechanism, also referred to as Two-phase Login MFA.
diff --git a/content/vault/v1.19.x/content/partials/global-settings/both/mfa.mdx b/content/vault/v1.19.x/content/partials/global-settings/both/mfa.mdx
index bd0bf79b74..ca4d4c500c 100644
--- a/content/vault/v1.19.x/content/partials/global-settings/both/mfa.mdx
+++ b/content/vault/v1.19.x/content/partials/global-settings/both/mfa.mdx
@@ -3,14 +3,14 @@
**`[-mfa | VAULT_MFA] (string : "")`**
A multi-factor authentication (MFA) credential, in the format
-`mfa_method_name[:key[=value]]`, that the CLI should use to authenticate to
+`mfa_method_id:passcode`, that the CLI should use to authenticate to
Vault. The CLI adds MFA credentials to the `X-Vault-MFA` header when calling the
underlying API endpoint.
**Examples**:
-- CLI flag: `-mfa "totp:password=12345"`
-- Environment variable: `export VAULT_MFA="totp:password=12345"`
+- CLI flag: `-mfa "d16fd3c2-50de-0b9b-eed3-0301dadeca10:695452"`
+- Environment variable: `export VAULT_MFA="d16fd3c2-50de-0b9b-eed3-0301dadeca10:695452"`
diff --git a/content/vault/v1.20.x/content/docs/auth/login-mfa/index.mdx b/content/vault/v1.20.x/content/docs/auth/login-mfa/index.mdx
index 683ad116bd..9ba3a6fc21 100644
--- a/content/vault/v1.20.x/content/docs/auth/login-mfa/index.mdx
+++ b/content/vault/v1.20.x/content/docs/auth/login-mfa/index.mdx
@@ -112,6 +112,11 @@ $ curl \
http://127.0.0.1:8200/v1/auth/userpass/login/alice
```
+Use the `-mfa` CLI flag or `VAULT_MFA` environment variable to pass in MFA credentials. For example:
+
+- CLI flag: `-mfa "d16fd3c2-50de-0b9b-eed3-0301dadeca10:695452"`
+- Environment variable: `export VAULT_MFA="d16fd3c2-50de-0b9b-eed3-0301dadeca10:695452"`
+
### Two-Phase login
The more conventional and prevalent MFA method is a two-request mechanism, also referred to as Two-phase Login MFA.
diff --git a/content/vault/v1.20.x/content/partials/global-settings/both/mfa.mdx b/content/vault/v1.20.x/content/partials/global-settings/both/mfa.mdx
index bd0bf79b74..ca4d4c500c 100644
--- a/content/vault/v1.20.x/content/partials/global-settings/both/mfa.mdx
+++ b/content/vault/v1.20.x/content/partials/global-settings/both/mfa.mdx
@@ -3,14 +3,14 @@
**`[-mfa | VAULT_MFA] (string : "")`**
A multi-factor authentication (MFA) credential, in the format
-`mfa_method_name[:key[=value]]`, that the CLI should use to authenticate to
+`mfa_method_id:passcode`, that the CLI should use to authenticate to
Vault. The CLI adds MFA credentials to the `X-Vault-MFA` header when calling the
underlying API endpoint.
**Examples**:
-- CLI flag: `-mfa "totp:password=12345"`
-- Environment variable: `export VAULT_MFA="totp:password=12345"`
+- CLI flag: `-mfa "d16fd3c2-50de-0b9b-eed3-0301dadeca10:695452"`
+- Environment variable: `export VAULT_MFA="d16fd3c2-50de-0b9b-eed3-0301dadeca10:695452"`
diff --git a/content/vault/v1.21.x (rc)/content/docs/auth/login-mfa/index.mdx b/content/vault/v1.21.x (rc)/content/docs/auth/login-mfa/index.mdx
index 3559627680..c7b7aceae5 100644
--- a/content/vault/v1.21.x (rc)/content/docs/auth/login-mfa/index.mdx
+++ b/content/vault/v1.21.x (rc)/content/docs/auth/login-mfa/index.mdx
@@ -113,6 +113,11 @@ $ curl \
http://127.0.0.1:8200/v1/auth/userpass/login/alice
```
+Use the `-mfa` CLI flag or `VAULT_MFA` environment variable to pass in MFA credentials. For example:
+
+- CLI flag: `-mfa "d16fd3c2-50de-0b9b-eed3-0301dadeca10:695452"`
+- Environment variable: `export VAULT_MFA="d16fd3c2-50de-0b9b-eed3-0301dadeca10:695452"`
+
### Two-Phase login
The more conventional and prevalent MFA method is a two-request mechanism, also referred to as Two-phase Login MFA.
diff --git a/content/vault/v1.21.x (rc)/content/partials/global-settings/both/mfa.mdx b/content/vault/v1.21.x (rc)/content/partials/global-settings/both/mfa.mdx
index bd0bf79b74..ca4d4c500c 100644
--- a/content/vault/v1.21.x (rc)/content/partials/global-settings/both/mfa.mdx
+++ b/content/vault/v1.21.x (rc)/content/partials/global-settings/both/mfa.mdx
@@ -3,14 +3,14 @@
**`[-mfa | VAULT_MFA] (string : "")`**
A multi-factor authentication (MFA) credential, in the format
-`mfa_method_name[:key[=value]]`, that the CLI should use to authenticate to
+`mfa_method_id:passcode`, that the CLI should use to authenticate to
Vault. The CLI adds MFA credentials to the `X-Vault-MFA` header when calling the
underlying API endpoint.
**Examples**:
-- CLI flag: `-mfa "totp:password=12345"`
-- Environment variable: `export VAULT_MFA="totp:password=12345"`
+- CLI flag: `-mfa "d16fd3c2-50de-0b9b-eed3-0301dadeca10:695452"`
+- Environment variable: `export VAULT_MFA="d16fd3c2-50de-0b9b-eed3-0301dadeca10:695452"`