# Secure IAM Users
<a name="secure-an-admin"></a>

After you've signed up for an Amazon Web Services account, protect your administrative user by enabling multi-factor authentication (MFA). For instructions, see [Enable a virtual MFA device for an IAM user (console)](https://docs.amazonaws.cn/IAM/latest/UserGuide/id_credentials_mfa_enable_virtual.html#enable-virt-mfa-for-iam-user) in the *IAM User Guide*.

To allow other users to access your Amazon Web Services account resources, create IAM users. To protect IAM users, enable MFA and grant IAM users only the permissions necessary to perform their tasks.

For more information on creating and protecting IAM users, see the following topics in the *IAM User Guide*:
+ [Creating an IAM user in your Amazon Web Services account](https://docs.amazonaws.cn/IAM/latest/UserGuide/id_users_create.html)
+ [Managing access to Amazon resources](https://docs.amazonaws.cn/IAM/latest/UserGuide/access.html)
+ [IAM identity-based policy examples](https://docs.amazonaws.cn/IAM/latest/UserGuide/access_policies_examples.html)