From 597db3fcb5dbb7ad124c192418ac4312ae126a0a Mon Sep 17 00:00:00 2001 From: Duncan McClean Date: Wed, 18 Mar 2026 14:22:32 +0000 Subject: [PATCH] Document ability to disable 2FA via .env variable --- content/collections/pages/users.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/content/collections/pages/users.md b/content/collections/pages/users.md index 98a27316b..d470f9039 100644 --- a/content/collections/pages/users.md +++ b/content/collections/pages/users.md @@ -276,10 +276,12 @@ To enable 2FA, head to your **Profile** in the Control Panel. Scan the QR code w ], ``` +You may also disable 2FA altogether by setting `STATAMIC_TWO_FACTOR_ENABLED=false` in your `.env` file. + :::warning Statamic uses your `APP_KEY` to encrypt the two-factor authentication secret and recovery codes. -You may run into issues with two-factor authentication if you have different `APP_KEY` values between environments *and* they share the same users (eg. you're tracking users in Git). +You may run into issues with two-factor authentication if you have different `APP_KEY` values between environments *and* they share the same users (eg. you're tracking users in Git). You may want to disable 2FA locally in this case. ::: ## Passkeys