---
title: Administering two-factor authentication
summary: null
url: >-
https://www.fastly.com/documentation/guides/organizations-and-accounts/account-members-and-permissions/administering-two-factor-authentication
---
> **IMPORTANT:** This guide only applies to Fastly accounts or to Signal Sciences accounts linked to Fastly accounts. If you only have a Signal Sciences account, check out our guide to [enabling and disabling two-factor authentication](https://www.fastly.com/documentation/guides/next-gen-waf/account-info/enabling-and-disabling-two-factor-authentication) instead.
If you're assigned the [superuser role](https://www.fastly.com/documentation/guides/organizations-and-accounts/account-members-and-permissions/about-user-roles-and-permissions) for your company, you can control two-factor authentication (2FA) settings for your account both company-wide and for individual users. The [**User management**](https://manage.fastly.com/account/users) page displays a list of all users associated with your company, including their currently assigned roles, the security posture of their 2FA and SSO, and when they were last active online.
> **HINT:** Click the arrow to the left of any user name to view additional information about their account.
## Enabling company-wide two-factor authentication
> **IMPORTANT:** Two-factor authentication enforcement (2FA enforcement) at the company level can only be enabled for Fastly accounts or Fastly accounts with linked Signal Sciences accounts. Customers with only Signal Sciences accounts cannot enforce 2FA at the company level.
To enable company-wide two-factor authentication for all users:
1. Log in to the [Fastly control panel](https://manage.fastly.com) and select **Account** from the navigation sidebar.
2. In the **Company options** area, click the **Company-wide two-factor authentication** switch to **ON**.
Two-factor authentication becomes required for all users in your company. Anyone currently logged in and not previously using 2FA on their account will be logged out of the Fastly control panel. Anyone who has not already [enabled two-factor authentication](https://www.fastly.com/documentation/guides/organizations-and-accounts/personal-user-profiles/managing-your-two-factor-authentication#enabling-two-factor-authentication-for-your-account) for their account will be prompted to do so the next time they log in to the Fastly control panel.
## Disabling company-wide two-factor authentication
Once this feature is disabled, existing users will be able to manage their own two-factor authentication settings, and new users will not be required to set up two-factor authentication.
To disable company-wide two-factor authentication:
1. Log in to the [Fastly control panel](https://manage.fastly.com) and select **Account** from the navigation sidebar.
2. In the **Company options** area, click the **Company-wide two-factor authentication** switch to **OFF**. Company-wide two-factor authentication becomes disabled.
## Resetting a user's two-factor authentication
If company-wide two-factor authentication is enabled, superusers can reset any user's two-factor authentication. This may be necessary if a user gets locked out of their account, loses access to their authentication device, or needs to switch to a new device. Resetting 2FA clears the user's current authentication setup and requires them to configure it again on their next login.
To reset a user's two-factor authentication:
1. Log in to the [Fastly control panel](https://manage.fastly.com).
2. Go to **Account** > [**User management**](https://manage.fastly.com/account/users).
3. In the **Active users** area, click the three dots 
to the right of a user name and then select **Reset 2FA**. A warning message appears.
4. Click **Reset**. The user will need to [set up two-factor authentication](https://www.fastly.com/documentation/guides/organizations-and-accounts/personal-user-profiles/managing-your-two-factor-authentication#enabling-two-factor-authentication-for-your-account) for their account the next time they log in.
## Disabling two-factor authentication for a single user
If company-wide two-factor authentication is disabled, superusers can disable two-factor authentication for individual users who have voluntarily enabled it on their own accounts. This may be necessary if a user has lost access to their authentication device or if an account needs to be repurposed.
To disable two-factor authentication for a single user:
1. Log in to the [Fastly control panel](https://manage.fastly.com).
2. Go to **Account** > [**User management**](https://manage.fastly.com/account/users).
3. In the **Active users** area, click the three dots to the right of a user name and then select **Disable 2FA**. A warning message appears.
4. Click **Disable**. Two-factor authentication will no longer be required for the selected user.
## Ignoring two-factor authentication for a single user's account
If company-wide two-factor authentication is enabled, a superuser can exempt individual users from the company-wide 2FA requirement by ignoring two-factor authentication for their accounts. This is typically done for accounts being used for scripts and session authentication.
To ignore two-factor authentication for a single user's account:
1. Log in to the [Fastly control panel](https://manage.fastly.com).
2. Go to **Account** > [**User management**](https://manage.fastly.com/account/users).
3. In the **Active users** area, click the three dots to the right of a user name and then select **Ignore 2FA**. A warning message appears.
4. Click **Ignore**. Two-factor authentication will no longer be required for the selected user.
## Related content
- [Managing your two-factor authentication](https://www.fastly.com/documentation/guides/organizations-and-accounts/personal-user-profiles/managing-your-two-factor-authentication)
- [User API documentation](https://www.fastly.com/documentation/reference/api/account/user/)