I'm upgrading my development migration to 2.4. I was surprised to see that 2FA was enabled. Can this be turned off?

I have enough issues to deal with and prefer not to go through this learning curve. I prefer not to be forced to add apps to my phone so that I may get into the admin. I would prefer the ability to make the decision to add this at production time.

6 Answers 6


You can disable the 2FA module with

bin/magento module:disable Magento_TwoFactorAuth

This will let you login to admin normally until you have done your own risk assessments and set your security policy for Magento admin login.

For a more elegant solution the following module will let you disable and enable 2FA from the command line or admin



I found a way, by adding a system configuration to Enable/Disable it. I made a module, you can download it with composer:

composer require wolfsellers/module-enabledisabletfa

Or check it at: https://github.com/wolfsellers/module-enabledisabletfa


you can disable using this command :

 bin/magento module:disable Magento_TwoFactorAuth
 bin/magento cache:flush 

Try to disable Magento_TwoFactorAuth module and then run all commands for cache and permissions.


Please disable Magento_TwoFactorAuth module

php bin/magento module:disable Magento_TwoFactorAuth

php bin/magento s:up

php bin/magento c:c


Into Magento_root/app/etc/config.php find Magento_TwoFactorAuth and put 1 to 0 like this then save the file and run php bin/magento s:up command.

'Magento_TwoFactorAuth' => 0,

I Hope This Helps You.


Securing your Magento Admin account. Two-factor authentication (2FA) is now required for the Magento Admin. Admin users must first configure their 2FA before logging into the Admin through either the UI or a web API. 2FA is enabled by default and cannot be disabled. This extra step of authentication makes it harder for malicious users to log in to the Admin without authorization.


  • How do you feel about this? Commented Jul 31, 2020 at 19:48

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.