Two-factor authentication, aka 2FA, is an essential security layer that most online businesses are using. Despite its efficiency in protecting online stores, there are some cases when the owners need to turn off this function temporarily or even permanently.
In today’s blog, we will learn how to disable 2FA on Magento with just simple commands, guarantee you all can do it easily in the blink of an eye.
What is 2FA?
Two-factor authentication (2FA) is a smaller category belonging to Multi-factor authentication (MFA). 2FA enhances access security by requiring 2 authentication factors to verify user identity.
How to disable 2FA in Magento 2
Before coming to the 3 command line methods that can turn off 2FA in Magento 2, there are a few things you need to keep in mind.
With the default version, Magento will enable two-factor authentication after the 2.4 version. Therefore, before admins want to log into the admin dashboard, 2FA must be configured (via user interface or web API are both alright).
As mentioned above, this security layer makes it harder for suspicious access to log in without authorization, which is why we don’t recommend disabling 2FA. In case you must turn it off for some serious reasons, you can do it with our guide below.
The first time you log into the Magento admin dashboard, you will see a message coming up to warn that you need to enable 2FA to process your store’s admin area. Due to this warning, you can’t log in to the admin panel until you turn on 2FA. This happens to Magento 2 and later versions. Nevertheless, we can help you disable two-factor authentication with the following command lines from your root directory.
Here are the 3 options for you to choose.
Method 1:
php bin/magento module:disable Magento_TwoFactorAuth
bin/magento cache:flush
Method 2:
bin/magento config:set twofactorauth/general/enable 0
bin/magento cache:flush
Method 3:
The third command line for turning 2FA off temporarily takes a few more steps to proceed.
- Step 1: Open your app folder > etc > config.php using any text editor you like:
vi <Magento 2 root directory>/app/etc/config.php
-
Step 2: Next, you need to find Magento_TwoFactorAuth => 1, and replace it with Magento_TwoFactorAuth => 0. (0 for disable and 1 for enable)
-
Step 3: Finally, clean the cache with this command:
At this point, you are now able to access the admin panel dashboard, without using 2FA.
Magento 2 two-factor authentication extension you should have
Benefits of using 2FA
-
Better Security: Two-factor authentication adds an extra layer of security. Even if someone gets your password, they can’t access your data without another form of verification. This makes it tough for hackers to steal sensitive information and keeps your data safe.
-
Lower Fraud Risks: Data breaches can harm your business’s reputation, bring legal troubles, and cause financial losses. Enhanced security makes it much harder for hackers to break in, reducing the chances of a damaging data breach.
-
Ensure Regulations: Some industries, like healthcare and finance, require strict compliance with rules like GDPR and HIPAA. Following these guidelines protects consumers and minimizes risks. Consider your business’s specific needs when setting up security measures.
-
Build Trust: Customers feel safer when their data is secure. Despite the inconvenience, customers appreciate businesses that take their security seriously.
-
Fight Password Overload: The average person has dozens of passwords to remember. This leads to using the same passwords for different accounts or creating easy-to-guess ones. 2FA prevents password fatigue, making it harder for cybercriminals to crack even simple passwords.
-
Simplify Login: Single sign-on (SSO) makes multi-factor authentication easier. Users log in to multiple platforms using one set of credentials, often with a one-time password sent via SMS, voice, or other channels.
-
Cut Costs: 2 FA reduces fraud incidents, freeing up help desk time for other tasks. Compared to other security methods, like biometric authentication, 2FA is affordable and easy to set up, making it practical for businesses of all sizes.
-
More Options: There are various 2FA solutions available across different channels. You can choose the one that fits your customers, security needs, budget, and IT setup best.
Mageplaza 2FA free extension
With these advantages, there’s no double in the importance of 2FA for Magento 2 stores. Therefore, having a 2FA extension is essential. A free and user-friendly option for Magento 2 businesses is the Mageplaza Two-Factor Authentication module, which allows users to easily enable or disable 2FA quickly in the backend.
Highlight features:
- Set two-factor authentication to access the admin account
- No requirement for trusted devices
- Allow multiple trusted devices at the same time
- Set trusted device and trusted time
- Support from a mobile authentication app
Conclusion
We hope that our blog has made it clear how important 2FA is to Magento 2 stores and helps those who are looking for a way to disable 2FA a clear instruction. Consider carefully before turning off this function as it can protect 99.9% of account attacks.
