Disabling the Ability to Disable 2FA

Disabling the Ability to Disable 2FA

The Account Owner can prevent other users from turning off two-factor authentication (2FA) on their own accounts:

1. Go to Settings > Security.
2. Open Actions and select Edit 2FA Self Management.
3. Turn off Allow users to disable their own Two-Factor Authentication.
4. Select Update.

The Account Owner can always disable 2FA on their own account. The Account Owner can also manage another user's 2FA from that user's Security tab.

If 2FA enforcement applies to a user's role, that enforcement takes priority. The user cannot remain signed in without 2FA even while self-management is otherwise allowed.

2FA Disabled Message

When self-management is turned off, a user who tries to disable their own 2FA receives an error and the setting remains enabled.