We have a user with 2FA enabled, and we cannot disable it for them. Clicking the ‘Disable’ button on their account gives us: [image] (You supplied invalid parameters to the request: Discourse::InvalidParameters) There is no row in the users_second_factors table for the user_id. I’ve tried addin…

Try via the rails console: [image] Disable 2FA via console Self-Hosting This guide is intended for use when an admin is unable to disable 2-factor from the user admin page. The easiest way to disable 2-factor is through the admin user page. [image] Discourse supports …

It’d also be good to know what version of Discourse you are running. There have been fixes for the inability to disable 2FA via the UI since the first release of 2FA.

Thanks @omarfilip .. I did the UserSecondFactor delete but didn’t know about UserSecurityKey. This user had no UserSecondFactor record, but they did have a UserSecurityKey record. Once I removed that, their profile shows ‘Two Factor Authenciation: No’ – thanks! @jomaxro We’re on 2.5.0.beta4 ( 8…

[image] Brandon_Martus: @jomaxro We’re on 2.5.0.beta4 ( 8d3900c6da ) That version is old and unsupported, update as soon as possible.

Besides being old and unsupported, you’re also missing over a dozen security fixes, so your site is vulnerable. Please do upgrade.

Cannot disable 2FA for User

Support

omarfilip February 4, 2021, 10:35pm 2

Try via the rails console:

Topic		Replies	Views
Disable 2FA via console Self-Hosting how-to	0	2697	April 17, 2020
Turn off two factor authentication Support	5	1312	July 11, 2020
Command line disable Two Factor Authentication Support	13	2249	April 24, 2020
Task "users:disable_2fa" does not disable security keys Bug	4	390	March 18, 2023
Locked out of own forum. Asking for two-factor verification I never set up. Help : ) Support	6	571	September 30, 2022

Cannot disable 2FA for User

Related topics