Errors

Two-factor authentication is disabled on this site

Account 2FA setup/enable — isTotpAllowedOnSite false (403).

Two-factor authentication is disabled on this site

Account /api/account/2fa/setup or /enable refused because TOTP is not allowed on the site. UI may also announce the same via disabledOnSite.

Why this happens

Two-factor authentication mode is off. Same situation as Disabled by administrator / Google Authenticator is unavailable on this site labels in Settings.

Diagnose and fix

1. Admin: set Two-factor authentication mode to optional or mandatory.

2. Members: refresh Account Settings after the change; then set up.

3. Distinct from mandatory-mode “cannot disable” messages.

Related