Skip to content

Two Factor Authentication

Boris Rybalkin edited this page Mar 8, 2026 · 1 revision

Two-Factor Authentication (2FA) adds an extra layer of security by requiring a TOTP code from an authenticator app in addition to your password.

Enable

Go to Settings -> Two-Factor Authentication and click "Enable 2FA". A QR code will be shown once - scan it with your authenticator app (Google Authenticator, Authy, etc.) immediately.

Disable

Go to Settings -> Two-Factor Authentication and click "Disable 2FA".

Recovery

If you have lost access to your authenticator app and cannot log in, you can disable 2FA via SSH:

snap run platform.cli disable-2fa

This will disable the 2FA requirement and allow you to log in with just your password.

Recovery without SSH

If you cannot access the device via SSH (forgot the password), you can remove the disk from the device, mount it on another computer and delete the platform database file:

/var/snap/platform/current/platform.db

This will reset the device to a non-activated state. You will need to activate it again.

Clone this wiki locally