Two-factor authentication mode
Disabled, Optional, or Mandatory TOTP (Google Authenticator). No SMS. Default Optional.
Two-factor authentication mode
Site-wide TOTP policy (Google Authenticator or any compatible authenticator app). SMS and phone verification are not supported.
Where to find it
Admin → Settings → Mods → Security → Two-factor authentication mode
Setting key: two_factor
Default: optional
Options
| Value | Meaning |
|---|---|
disabled |
No 2FA on the platform |
optional |
Members may enable TOTP in Manage Account |
mandatory |
Members without TOTP must set it up at sign-in before a session is created |
Common problems
Locked out after Mandatory
An admin must reset 2FA for that user (or recover via your support process). Roll out Optional first, announce, then Mandatory.
Members never prompted
Mode is Disabled, or they already completed setup.