# Exclude users from using 2FA

**URL:** https://meta.discourse.org/t/exclude-users-from-using-2fa/172739
**Category:** Support
**Created:** [December 9, 2020, 10:50am UTC](https://meta.discourse.org/t/exclude-users-from-using-2fa/172739 "2020-12-09T10:50:07Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![reynsnivea](https://avatars.discourse-cdn.com/v4/letter/r/9f8e36/32.png) [@reynsnivea](https://meta.discourse.org/u/reynsnivea)
#### Post date: [December 9, 2020, 10:50am UTC](https://meta.discourse.org/t/exclude-users-from-using-2fa/172739/1 "2020-12-09T10:50:07Z")

</div>

Hi,

We use discourse. I enabled 2FA for all users. However, some users do not have a smartphone or really do not want to use 2FA.

I want to grant the an exception but it seems that they cannot register when the enforce 2FA for all users is enabled.  
It seems that one can only disable 2FA if user was registered with 2FA but I cannot see an option to invite a new user to register without having to set up 2FA.

Is there a workaround to exclude some users not to use 2FA upon registration ?

Thanks !

---

<div class="post-metadata">

### Author: ![itsbhanusharma](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/itsbhanusharma/32/180717_2.png) [@itsbhanusharma](https://meta.discourse.org/u/itsbhanusharma)
#### Post date: [December 9, 2020, 10:53am UTC](https://meta.discourse.org/t/exclude-users-from-using-2fa/172739/2 "2020-12-09T10:53:30Z")

</div>

I think the only possible options are:

1. Forced for everyone (all)
2. Forced for Staff users (staff)
3. Not forced (no)

So if you disable the `enforce_second_factor` setting by changing it to `no`, users willing to use 2FA can still enroll by visiting `/my/preferences/account` but that will allow users to register without nagging about 2fa.

---

<div class="post-metadata">

### Author: ![reynsnivea](https://avatars.discourse-cdn.com/v4/letter/r/9f8e36/32.png) [@reynsnivea](https://meta.discourse.org/u/reynsnivea)
#### Post date: [December 9, 2020, 10:57am UTC](https://meta.discourse.org/t/exclude-users-from-using-2fa/172739/3 "2020-12-09T10:57:52Z")

</div>

Hi,

Yes I think that’s the only option currently.

It would be nice If we could work with groups of users to have a more detailed level of control ?

Any plans to integrate that in future versions?

Thanks
