Two-factor authentication (member)
Site two_factor mode: disabled/optional/mandatory. Disable blocked when mandatory. Disable keeps secret for re-enable.
Two-factor authentication (member)
Add a second step after your password.
Where to find it
/account → Settings → Two-step sign-in / Google Authenticator
How it works
Site mode two_factor: disabled | optional (default) | mandatory. Setup shows a QR (issuer XFileUltra) and a 6-digit confirm. Login may require TOTP or force setup when mandatory.
Disable needs your password and is blocked when mandatory. Disable turns twoFactorEnabled off but keeps the secret so you can turn it on again without a new QR. Admin reset clears the secret entirely.
Common problems
Cannot turn off 2FA
Site is in mandatory mode - contact support/admin.
Lost authenticator
Ask an admin to reset 2FA, then set it up again.