Settings → Modules → Two-Factor Authentication → Configure
| Setting | Options | What it does |
|---|
| Enforcement — Admin | Off / Optional / Required | Whether staff are asked for 2FA. |
| Enforcement — Vendor | Off / Optional / Required | Marketplaces only. |
| Enforcement — Customer | Off / Optional / Required | Shoppers on your storefront. |
| Allowed methods | TOTP (authenticator app); email and SMS marked coming soon | Which second steps people can choose. |
| Default method | | Pre-selected when someone sets up 2FA. |
Fixed rules
| Rule | Value |
|---|
| Backup codes per person | 10 |
| Wrong codes before a pause | 5 |
| Pause length | 15 minutes |
| Code changes every | 30 seconds |
