How to Notarize an AWS MFA Identity Verification Form and Affidavit

The AWS MFA Individual Identity Verification Form and Affidavit is AWS's form for an account owner who asks AWS to remove the MFA devices enabled on the accounts listed in the appendix. The form includes a notary section. AWS states that the form must be validated by a notary public or signed with a qualified electronic signature to be effective.

The signer states that they own the listed accounts, asks AWS to remove the MFA devices, and agrees to the indemnity and false-statement language printed on AWS's form. The notary notarizes the signer's execution. The notary does not fill in account numbers or decide who owns the account.

Download the current form from AWS: AWS MFA Individual Identity Verification Form and Affidavit(opens in a new tab). iRemoteNotary does not host or recreate that PDF.

AWS's IAM guide tells a root user to try another registered MFA device first, then the email address and primary contact phone number on the account. An IAM user who cannot sign in with MFA contacts an administrator.

AWS Support may request the notarized identity affidavit when those recovery steps do not restore access. The notarization is the response to that Support request. It is not a shortcut around the published steps.

Source: AWS IAM lost or broken MFA guide(opens in a new tab).

A lost phone, a broken hardware token, a deleted authenticator app, or a device that no longer generates codes is the situation AWS's lost-or-broken MFA guide describes. If another registered MFA device still works, AWS says to sign in with that device and then deactivate the lost one.

When no other device works, a root user uses the account email and primary phone. If those factors are also unavailable, the next step is AWS Support. Support may then ask for this affidavit.

A root user is the account owner who signs in with the account email address. AWS gives that user the alternative email and phone factors before a Support case.

An IAM user cannot recover an MFA device alone. AWS says the IAM user must contact an administrator, who deactivates the device. This affidavit does not replace that administrator.

Root-user recovery depends on the email and primary phone number registered with the account. An old or disconnected number can block that factor. AWS tells account owners to keep that contact information current, and to update it while another administrator can still sign in when possible.

If the registered phone is gone and Support asks for the affidavit, the notarization covers the signature on AWS's form. It does not change the phone number, restore billing access, or reopen the account.

AWS allows a remote online notary who complies with applicable law, and it allows a qualified notary in the signer's current location. A signer outside the United States can use a commissioned U.S. online notary when the signer can complete the live identity check.

International signers can message iRemoteNotary on WhatsApp at +1 (305) 608-4003. Include your country, preferred time zone, and whether you have a passport or other government photo ID. A passport is usually preferred.

Remote online notarization is performed under the law of the online notary's commissioning state. AWS still reviews the packet. Read how a foreign passport can be used for a U.S. document and notarizing U.S. documents while traveling.

AWS's requirements PDF says proof of identification must be valid, current, include a photo, and be issued by a government. Acceptable examples are a driver's license, passport, government ID, and military ID.

Photocopies for AWS are a separate customer upload. They show the front and back, stay legible, and do not overlap the notary seal. Those copies are not the notarial identification check.

AWS lists badges, credit cards, school IDs, Social Security cards, employee IDs, and library cards as unacceptable proof of identification for this packet.

The requirements PDF updated September 4, 2026 covers MFA removal and email change. Proof of address is optional for an MFA removal request and required for an email change. AWS may still ask for it during an MFA review.

Acceptable address records include a government picture ID, utility bill, ISP bill, satellite or cable statement, property deed, rental or lease agreement, and a bank or credit-card statement with the account number redacted except the last four digits. AWS communications and Amazon.com invoices are not acceptable proof of address.

This guide covers the MFA identity affidavit. A separate email-change notarization page waits until a distinct official email-change form is confirmed.

Source: AWS Required Documentation for MFA Removal and Email Change(opens in a new tab).

Individuals in the European Union and European Economic Area may give AWS a signed identity verification form executed with a qualified electronic signature from a provider on the European Commission's eIDAS trusted list. Advanced electronic signatures and simple electronic signatures are not accepted for that alternative.

iRemoteNotary does not issue a qualified electronic signature. A signer who wants the notarization path can still use a remote online notary who complies with applicable law.

Do not sign or date the affidavit before the notary session. AWS says the signer signs and dates only in the notary's presence, and the signature dates must match.

Complete the identifying information and the account appendix before the session. Leave the signature and date blank until you are on camera with the notary.

AWS says the notarized affidavit must have the notary stamp or seal on the same page as the affidavit, unless the laws in the signer's area dictate otherwise. The seal must not cover the signer's name or the affidavit text.

A remote online notarization uses an electronic notarial certificate under the law of the online notary's commissioning state. The completed file AWS receives needs that certificate with the affidavit.

The notary identifies the signer for the notarial act, witnesses the signature in the live session, completes the notarial certificate, and applies the seal as the platform and applicable law allow.

iRemoteNotary does not remove MFA devices. iRemoteNotary does not access AWS accounts. iRemoteNotary does not verify AWS account ownership, fill in AWS account numbers, contact AWS Support, or provide AWS technical support. iRemoteNotary does not guarantee account recovery. iRemoteNotary is not affiliated with Amazon, AWS, or AWS Support. AWS controls whether the documentation is accepted and whether MFA is removed.

Standard online notarization starts at $25. An international coordination fee of $25 may apply when the signer is outside the United States. Additional notarizations are $15 each if the uploaded document requires more than one. The AWS MFA affidavit normally has one signature block. The appendix with account information does not by itself add a second seal. Final pricing depends on the uploaded document and the notarizations it requires.