# Two-factor authentication method for additional security during login

**URL:** https://meta.discourse.org/t/two-factor-authentication-method-for-additional-security-during-login/324181
**Category:** Support
**Tags:** 2fa
**Created:** [August 30, 2024, 1:52pm UTC](https://meta.discourse.org/t/two-factor-authentication-method-for-additional-security-during-login/324181 "2024-08-30T13:52:20Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![Jaskaran](https://avatars.discourse-cdn.com/v4/letter/j/ea666f/32.png) [@Jaskaran](https://meta.discourse.org/u/Jaskaran)
#### Post date: [August 30, 2024, 1:52pm UTC](https://meta.discourse.org/t/two-factor-authentication-method-for-additional-security-during-login/324181/1 "2024-08-30T13:52:20Z")

</div>

m unable to use SSO for one of my sites, so users will need to log in with just a username and password. Is there a way to implement a more secure, two-factor authentication method for additional security?

---

<div class="post-metadata">

### Author: ![Moin](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/moin/32/554653_2.png) [@Moin](https://meta.discourse.org/u/Moin)
#### Post date: [August 30, 2024, 2:02pm UTC](https://meta.discourse.org/t/two-factor-authentication-method-for-additional-security-during-login/324181/2 "2024-08-30T14:02:24Z")

</div>

You can select “all” for the `enforce_second_factor` site setting to enforce two-factor authentication for all users

---

<div class="post-metadata">

### Author: ![Jaskaran](https://avatars.discourse-cdn.com/v4/letter/j/ea666f/32.png) [@Jaskaran](https://meta.discourse.org/u/Jaskaran)
#### Post date: [August 30, 2024, 2:14pm UTC](https://meta.discourse.org/t/two-factor-authentication-method-for-additional-security-during-login/324181/3 "2024-08-30T14:14:16Z")

</div>

in two factor authentication can you pls tell how this will work

---

<div class="post-metadata">

### Author: ![Moin](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/moin/32/554653_2.png) [@Moin](https://meta.discourse.org/u/Moin)
#### Post date: [August 30, 2024, 4:34pm UTC](https://meta.discourse.org/t/two-factor-authentication-method-for-additional-security-during-login/324181/4 "2024-08-30T16:34:13Z")

</div>

Have you read other topics on this subject?

[Just published some how-to videos to help users get started with two-factor (2FA) authentication](https://meta.discourse.org/t/just-published-some-how-to-videos-to-help-users-get-started-with-two-factor-2fa-authentication/312763)

[2FA - do we have to do anything to enable it? - #4 by jomaxro](https://meta.discourse.org/t/2fa-do-we-have-to-do-anything-to-enable-it/94609/4)
