Two-factor authentication (2FA) is an important security measure that significantly improves the protection of your user accounts. It adds an additional layer of security over the conventional combination of client name, user name and password. The 2FA settings can be managed under Tools >> Settings >> Basic settings >> Security .
allow: By selecting this option, you allow individual users to activate two-factor authentication independently for their respective user account. This offers a flexible solution where each user can decide for themselves whether they want to use the additional security layer.
force: The “Force” option can be used to activate 2FA for all users. By setting this option, all users who do not have an active 2FA will be logged out overnight and forced to set up 2FA the next time they log in. If the option is active, the last active 2FA method cannot be deleted. Please note that the administrative right “User management” must be activated for all users in order to enforce 2FA.
prevent: If you select this option, two-factor authentication is deactivated system-wide. This means that no users have the option to set up or use 2FA for their accounts. If this option is selected later, all existing 2FAs will be deleted.