How to remove 2FA?

NethServer Version: 7.3.2003
Module: Base

My users are really, really bad. How can I entirely remove the option of 2FA from the server?

Each user stores the key inside his home

rm -f /var/lib/nethserver/home/*/.2fa.secret
signal-event otp-save

https://docs.nethserver.org/en/latest/base_system2.html?highlight=otp#emergency-recovery

1 Like

No, I mean, on the password reset page, there’s a section for 2FA and I don’t want them to have the ability to use, set, or be confused by the 2FA. I need it 100% disabled.

Hum…this has not been taken into account…each is free to use or not. We have not thought on it.

For those who use it, you can make a cron to remove the key each night :slight_smile:

Ok. My users are incredibly poor on this and I’d rather NOT have the section show at all.

Thanks for the reply. :smiley:

What do you think @giacomo @davidep ?

Sorry, but there isn’t an option to hide that part.

To enable 2FA you need the validation step, poor users should not be able to complete it.
If they enable it, for sure they will be able to use it.

2 Likes