-
Notifications
You must be signed in to change notification settings - Fork 46
Two Factor Authentication
Two-Factor Authentication (2FA) adds an extra layer of security by requiring a TOTP code from an authenticator app in addition to your password.
Go to Settings -> Two-Factor Authentication and click "Enable 2FA". A QR code will be shown once - scan it with your authenticator app (Google Authenticator, Authy, etc.) immediately.
Go to Settings -> Two-Factor Authentication and click "Disable 2FA".
If a user has lost access to their authenticator app, an admin can reset their TOTP registration via SSH:
snap run platform.cli reset-totp <username>
The user will be prompted to scan a new QR code on their next login.
If you want to disable the 2FA requirement entirely, run via SSH:
snap run platform.cli disable-2fa
This will disable 2FA for all users and allow login with just a password.
If you cannot access the device via SSH (forgot the password), you can remove the disk from the device, mount it on another computer and delete the platform database file:
/var/snap/platform/current/platform.db
This will reset the device to a non-activated state. You will need to activate it again.