Could not start 2FA setup
Member clicked set up authenticator on Account → Settings, but POST /api/account/2fa/setup failed. Fallback: Could not start 2FA setup.
Why this happens
API may return clearer messages (2FA disabled on site, already enabled, already configured, invalid CSRF, not signed in). The fallback appears when the response has no usable error string. Site must allow TOTP (isTotpAllowedOnSite).
Diagnose and fix
1. Refresh, confirm signed in, ensure CSRF loaded, try again.
2. Admin: Two-factor authentication mode not “disabled.”
3. If authenticator was partially configured, turn it on/off from Settings or staff Reset user 2FA / sessions.
4. Mandatory login-flow setup uses different strings (start/load authenticator setup).