Force to use 2FA -always-

[size=medium]Hi,[/size]

[size=medium]First of all congratulations for this excellent tool.  To be honest, I am also thinking to donate . . . this means that I really  :heart: this tool.[/size]

[size=medium]I have a question, though:[/size]

• [size=medium]- I  want [/size][size=medium]2FA forced on users [/size]

[size=medium]The application idea for this tool is to: [/size]

• [size=medium]- create users myself[/size]
• [size=medium]- sent them their email containing their login details[/size]

[size=medium]When they log in the first time they MUST set their password and their 2FA -not leave it optional-[/size]

[size=medium]I could not see this setup, unless I am sleepping deprived or unable to read the guidelines.[/size]

[size=medium]Could someone tell me whether this is possible?[/size]

[size=medium]Cheers,[/size]

[size=medium]Coiram[/size]

Hi Coiram,

Sorry for the delay on getting back to your request. 2Fa enforcement is not native to UserSpice. You can enforce this by checking if:
-the user is not on a 2Fa configuration page
-the user has not setup 2Fa (check the values in the $users->data()

If both the above are not met, I would redirect them to account.php?err=You must configure Two Factor Authentication or you can redirect them directly to the manage 2fa page.

Brandin.