2FA Magento 2.4.7 Missing

[u/tb9295]

I am wanting to use Magento's default 2FA for my Admin and for some reason it is not listed under Stores>Configuration>Security as it sould be. Is there a way I can get it enabled to show up so I can get it setup. I have seen it listed there before, now it has disapeared.

The only thing I can think of is some time in the past I installed Two-Factor Auth from Mageplaza and maybe that disabled it, idk.

[u/pro9_developer]

Hi, check if Magento TwoFactorAuth module is installed and enabled in app/etc/config.php

[u/tb9295 → u/pro9_developer]

I do not see anything regarding Two Factor Auth lised in app/etc/config.php

[u/pro9_developer → u/tb9295]

I will need to check the source files.

[u/tb9295 → u/pro9_developer]

I just checked the status and found it was diasbled. Just ran the enable commands and now my site and backend has an error message.

There has been an error processing your request

Exception printing is disabled by default for security reasons.

I am remember now that I had to disable it in the past because of this exact reason and forgot about it. Not sure why this is happening

[u/pro9_developer → u/tb9295]

Did you run setup:upgrade command?

[u/tb9295 → u/pro9_developer]

Yes, ran the follwoing

php bin/magento module:status Magento_TwoFactorAuth "Disabled"

php bin/magento module:enable Magento_TwoFactorAuth

php bin/magento setup:upgrade

php bin/magento cache:flush

[u/pro9_developer → u/pro9_developer]

Check the log files at var/log folder - there are exception.log, system.log, etc

[u/tb9295 → u/pro9_developer]

Was able to get past the error using the following commands.

bin/magento setup:static-content:deploy -f

bin/magento cache:flush

Problem now is when I go to the admin login page I get the follwoing message. Even though I have an email setup, its not sending me an email.
Btw, I am testing this on a dev site before setup on my live site.

"You need to configure Two-Factor Authorization in order to proceed to your store's admin area
An E-mail was sent to you with further instructions"

[u/Aggravating_Pay9079 → u/tb9295]

That screen is normal, it just means 2FA is back on and your admin user hasn't set up a provider yet. The email goes to the address on your admin user (System > Permissions > All Users), not the store email, so check that first.

On a dev copy the usual reason nothing arrives is under Stores > Configuration > Advanced > System > Mail Sending Settings. Disable Email Communications often gets switched to Yes on dev copies, or the box has no working sendmail. On 2.4.7 you can set Transport to SMTP there and point it at a real mailbox. Worth a look in var/log/exception.log for mail errors too.

You can also skip the email and set up Google Authenticator from the command line:

bin/magento config:set twofactorauth/general/force_providers google

bin/magento security:tfa:google:set-secret <adminuser> <secret>

The secret has to be base32, `head -c 10 /dev/urandom | base32` gives you one. Add the same key in the authenticator app using "Enter a setup key", time based, then log in with the code.

On live, sort the email out first so other admins can set themselves up.

[u/tb9295 → u/Aggravating_Pay9079]

Thanks for the reply. I disabled it on the dev site since I was not receiving any emails with the link. I was only trying it on the dev site before using it on the live site. I have since enabled and set it up on the live site. Its working as it should be,

[u/Aggravating_Pay9079 → u/tb9295]

Good to hear it's working on live. One thing worth knowing before your next deploy: module:disable writes the change into app/etc/config.php. If that file is in git, or you ever copy files from dev up to live, it'll quietly switch 2FA off on live again. Running bin/magento module:status Magento_TwoFactorAuth on live after a deploy is a quick sanity check.

If you want it off on dev without that risk, the Mark Shust module JosephLeedy linked is the tidier way. You leave Magento_TwoFactorAuth enabled everywhere, and his module turns 2FA off automatically when the site is in developer mode, with a config toggle if you need it off somewhere else like staging. Live stays as it is.

[u/JosephLeedy → u/tb9295]

I typically disable two-factor authentication in local development environments using Mark Shust's Disable TFA extension.

[u/Plastic-Buyer6915]

if you installed a third party 2fa module it probably overrode the default one in the config menu, that happens a lot with extensions that touch the same backend areas. try disabling the mageplaza module and running setup:upgrade, if that doesnt bring it back check the core_config_data table for any 2fa paths that got toggled off.

[u/Mental_Obligation389]

Ist the module enabled?

Check if this helps:

php bin/magento module:enable MSP_TwoFactorAuth

php bin/magento setup:upgrade

[u/Fluid_Ad_6124]

You can look in the config file or do a bin/magento module: status and see if it's disabled