automatically use email address as 2fa provider #1245

New Issue

MrUnknownDE · 2026-04-06T01:41:33+02:00

MrUnknownDE commented

2026-04-06 01:41:33 +02:00

Originally created by @stefan0xC on 2/4/2024

When an organization policy requires a 2FA provider the registration via the organizations invite link should add the email address as 2FA provider. You can also skip the policy check if you set EMAIL_2FA_ENFORCE_ON_VERIFIED_INVITE=true (e.g. so that email provider is added to users that are invited via the /admin panel).

This should fix #4303, however I've also added a way to ensure that the email address will be used automatically as fallback 2FA provider whenever needed (which you have to opt in by setting EMAIL_2FA_AUTO_FALLBACK=true). I'd consider this an experimental feature as it would be Vaultwarden only.

If you don't want your users to enable email 2FA provider at all, you should set _ENABLE_EMAIL_2FA=false to disable email as 2FA provider entirely.

*Originally created by @stefan0xC on 2/4/2024* When an organization policy requires a 2FA provider the registration via the organizations invite link should add the email address as 2FA provider. You can also skip the policy check if you set `EMAIL_2FA_ENFORCE_ON_VERIFIED_INVITE=true` (e.g. so that email provider is added to users that are invited via the `/admin` panel). This should fix #4303, however I've also added a way to ensure that the email address will be used automatically as fallback 2FA provider whenever needed (which you have to opt in by setting `EMAIL_2FA_AUTO_FALLBACK=true`). I'd consider this an experimental feature as it would be Vaultwarden only. If you don't want your users to enable email 2FA provider at all, you should set `_ENABLE_EMAIL_2FA=false` to disable email as 2FA provider entirely.

MrUnknownDE closed this issue

2026-04-06 01:41:33 +02:00

MrUnknownDE referenced this issue

2026-04-06 05:27:37 +02:00

[META] Feature Requests #3692

Sign in to join this conversation.

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/vaultwarden#1245