README

Adds an admin configuration switch to turn Magento 2's mandatory Two-Factor Authentication on or off. Magento forces 2FA on every admin login, which is correct for production but a constant friction on staging, dev and CI environments where a shared admin has no phone to enrol. This module lets you disable it there — from config, without hacking core or juggling bin/magento security:tfa:* commands.

Maintained fork of wolfsellers/module-enabledisabletfa, verified on Magento 2.4.9 / PHP 8.4.

What changed vs upstream

• Added require to composer.json (php 8.1–8.5, magento/framework >=103.0.4 <104); the original declared neither, so Composer would install it on any incompatible version silently.
• Relaxed the magento/module-two-factor-auth constraint from 1.* (which blocked newer Magento) to work with the version shipped in 2.4.9. Removed minimum-stability: dev.

Use it on non-production environments. Leave 2FA enabled in production.

• Safe default: upstream shipped the config default as disabled, so installing the module turned OFF mandatory 2FA out of the box. This fork defaults to enabled=1 — 2FA stays enforced until you deliberately turn it off, so installing it never silently drops 2FA in production.

Install

composer require sisl-source/module-enabledisabletfa
bin/magento module:enable WolfSellers_EnableDisableTfa
bin/magento setup:upgrade

Then toggle it under Stores → Configuration → Security → 2FA (admin scope).

License

MIT (upstream). Maintained by SISL.

Maintained by SISL

Maintained fork by SISL — Magento 2 development and modules. More self-hosted plugins: SISL Marketplace.