How to Setup Two Factor Authentication in Magento 2.4
Did you check the latest Magento 2.4 release yet?
Are you excited to implement the new features that can boost the store’s performance and security?
Well, we are!
And as a part of it, here’s the method to set up two factor authentication in Magento 2.4.
Earlier, Magento 2 did offer an option to install two-factor authentication. The store owner can enable or disable the Magento 2 2FA as per the requirements. However, it is not best practice to disable Magento 2FA.
However, according to Magento 2.4 release notes, 2FA is enabled by default and cannot be disabled.
It is done so to make it harder for the spam users to log in to the admin panel without authority.
Security cannot be neglected when it comes to the online store and hence check the method to configure two-factor authentication in Magento 2.4 store.
Note: While installing the latest Magento 2.4 version, if you face the Unexpected ‘)’ syntax error, check the solution here.
Steps to setup two factor authentication in Magento 2.4:
- Login to admin panel
- Navigate to Stores > Configuration
- Select 2FA under Security
- Expand General section
- Select the providers to use. You can also select multiple providers
- Google Authenticator
- Duo Security
- Authy
- U2F (Yubikey and others)
- Save the configuration
That’s it.
Once configured, the 2FA is prompted as shown below:
Duo Authentication:
Authy authentication:
U2F authentication:
(Image Source – Magento Docs)
You can also refer to the video tutorial to set up two-factor authentication in Magento 2.4 from our Magento 2 video tutorial series:
Any doubts about the Magento 2 two factor authentication configuration can be mentioned in the Comments section below. I’d be happy to help you out.
Also, share the solution with the Magento community via social media.
Thank you.
6 Comments
Hi,
I enabled using this command:
bin/magento module:enable Magento_TwoFactorAuth
but when trying to login to the backend, I get the error:
“The account sign-in was incorrect or your account is disabled temporarily. Please wait and try again later.”
But I am sure it is correct.
Is there another way to configure 2FA without using the backend and keeping my access to the backend?
Thanks.
Hello,
This error occurs when the details are wrong or the user is locked.
Thank you.
I am getting this error —
You need to configure Two-Factor Authorization in order to proceed to your store’s admin area
An E-mail was sent to you with further instructions
in my local machine and i am not able to login in admin and not getting any solution tried disable module and other solution available on internet . please suggest
Hello Abhishek,
You need to disable the Magento_TwoFactorAuth extension to resolve the error.
Thank you.
Hi,
I have the same issue. I did disable the module and was able to enter the Magento backed. But then what to do, 2FA menu has been removed? If it is best practice to enable and configure it, how can I do this without losing my entry to the backend?
Hello,
Please enable the extension and set up two-factor authentication.
Thanks