Could not turn on authenticator
Turning on an already-configured authenticator (POST /api/account/2fa/enable) failed. Fallback product text when no clearer API error is shown.
Why this happens
Enable requires a stored twoFactorSecret, TOTP allowed on the site, valid session/CSRF, and twoFactorEnabled still false. Missing setup (“Set up Google Authenticator first”), already enabled, or 2FA disabled on site return specific messages; otherwise you see this fallback.
Diagnose and fix
1. Complete Set up Google Authenticator (scan QR + confirm code) before Turn on.
2. Refresh CSRF/session; retry.
3. Admin: ensure 2FA mode allows member TOTP.
4. Distinct from Could not disable 2FA and from confirm-code Invalid code during first setup.