# Backoffice 2FA admin controll

**URL:** <https://forum.umbraco.com/t/backoffice-2fa-admin-controll/1011>\
**Category:** Questions\
**Created:** [March 11, 2025, 8:34am UTC](https://forum.umbraco.com/t/backoffice-2fa-admin-controll/1011 "2025-03-11T08:34:08Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![camillatoxic](https://forum.umbraco.com/user_avatar/forum.umbraco.com/camillatoxic/32/764_2.png) [@camillatoxic](https://forum.umbraco.com/u/camillatoxic)\
**Post date:** [March 11, 2025, 8:34am UTC](https://forum.umbraco.com/t/backoffice-2fa-admin-controll/1011/1 "2025-03-11T08:34:08Z")

</div>

Hi!

I’m looking into implementing 2FA for the backoffice using this guide: [Two-factor Authentication | Umbraco CMS](https://docs.umbraco.com/umbraco-cms/13.latest/reference/security/two-factor-authentication#example-implementation-for-authenticator-apps-for-users)

I’m wondering if there’s a way to either automatically activate 2FA on all users, or if anyone has implemented a custom solution for a admin user to activate it on all users?

If that’s not possible, have anyone implemented a custom solution for a admin to at least see which users that has activated 2FA? That way they would at least have some control over it.

---

<div class="post-metadata">

**Author:** ![danielhnelson](https://forum.umbraco.com/user_avatar/forum.umbraco.com/danielhnelson/32/770_2.png) [@danielhnelson](https://forum.umbraco.com/u/danielhnelson)\
**Post date:** [March 11, 2025, 9:21am UTC](https://forum.umbraco.com/t/backoffice-2fa-admin-controll/1011/2 "2025-03-11T09:21:02Z")

</div>

Hi Camilla

We had a similar situation recently, and we found an old Umbraco Discord thread that provided some example implementations: [Making 2FA Mandatory for Admin Users Umbraco #help-with-umbraco](https://discord-chats.umbraco.com/t/16602834/making-2fa-mandatory-for-admin-users)

We took heavy inspiration from Mark Drake’s solution, and also added a app setting to toggle whether 2FA is enforced for all users or not, accessing the variable with this function:

```auto
const twoFactorIsEnforced = () => {
  return Umbraco.Sys.ServerVariables.twoFactor.enforceTwoFactor;
}

```

Hope this helps!
