# Disabling the Ability to Disable 2FA

Source: https://docs.astalty.com.au/guide/settings/security/disabling-the-ability-to-disable-2fa

> Stop users from turning off two-factor authentication on their own accounts.

## Disabling the Ability to Disable 2FA

The Account Owner can prevent other users from turning off two-factor authentication (2FA) on their own accounts:

1. Go to [**Settings > Security**](https://app.astalty.com.au/settings/security).
2. Open **Actions** and select **Edit 2FA Self Management**.
3. Turn off **Allow users to disable their own Two-Factor Authentication**.
4. Select **Update**.

![The Security settings page with the Actions menu open on the Two-Factor Authentication card and an arrow pointing to Edit 2FA Self Management, where 2FA Self-Management reads Users can disable their own Two-Factor Authentication.](https://docs.astalty.com.au/assets/2fa1.png)

The Account Owner can always disable 2FA on their own account. The Account Owner can also manage another user's 2FA from that user's **Security** tab.

If 2FA enforcement applies to a user's role, that enforcement takes priority. The user cannot remain signed in without 2FA even while self-management is otherwise allowed.

![The Two-Factor Authentication drawer with Allow users to disable their own Two-Factor Authentication highlighted under Two-Factor Authentication Self-Management, shown unticked, and the Update button.](https://docs.astalty.com.au/assets/2fa2.png)

## 2FA Disabled Message

When self-management is turned off, a user who tries to disable their own 2FA receives an error and the setting remains enabled.

![The Disable Two-Factor Authentication dialog showing an error that your account owner has disabled this for your organisation, and asking the user to contact the account owner to disable Two-Factor Authentication, with a Close button.](https://docs.astalty.com.au/assets/cleanshot-2024-09-30-at-15.10.05@2x-1727934121.png)