# Why is 2FA incompatible with Associated Accounts? **URL:** https://meta.discourse.org/t/why-is-2fa-incompatible-with-associated-accounts/355387 **Category:** Support **Tags:** 2fa **Created:** [March 3, 2025, 5:49am UTC](https://meta.discourse.org/t/why-is-2fa-incompatible-with-associated-accounts/355387 "2025-03-03T05:49:50Z") **Posts on this page:** 1 **Showing post:** 3
### Author: ![KhoiUSA](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/khoiusa/32/373010_2.png) [@KhoiUSA](https://meta.discourse.org/u/KhoiUSA) #### Post date: [March 10, 2025, 12:09pm UTC](https://meta.discourse.org/t/why-is-2fa-incompatible-with-associated-accounts/355387/3 "2025-03-10T12:09:31Z")
Well, the reason being is that your associated accounts **can also be compromised** , and AFAIK associated accounts bypass the 2FA restriction on forum accounts. That is why 2FA suppresses associated accounts. Associated accounts can be compromised, especially without 2FA allowing bad-actors to therefore, log into your forum account as well. However, there is a site setting you can modify to stop 2FA-accounts from suppressing associated account logins. It’s named `Enforce second factor on external auth`, switch the setting so it’s unchecked. **Unless your external auth enforces 2FA and is secure, then I don’t recommend you disabling this setting.** ![The image describes features related to Enforce second factor on external auth, outlining two functionalities: bypassing non-TFA logins when TFA is forced and ensuring twice-factor authentication confirmation when the setting is disabled. (Captioned by AI)](https://global.discourse-cdn.com/meta/original/4X/7/a/a/7aa5d29c3a0c3df0abd3ee27c8d552066a0282d6.png) If you want to have people log in via your OpenID Connect service **only** , then you can disable the site setting `Enable local logins`. Keep in mind of the warning stating **`WARNING: if disabled, you may be unable to log in if you have not previously configured at least one alternate login method.`** ![image](https://global.discourse-cdn.com/meta/original/4X/4/e/6/4e6b1b9ad309e247cd39f8a8c4dd3d99bd5d9e60.png) --- _[View the full topic](https://meta.discourse.org/t/why-is-2fa-incompatible-with-associated-accounts/355387)._