---
title: 2FA Attr no longer editable by superusers through the Update User endpoint
summary: null
url: >-
  https://www.fastly.com/documentation/reference/changes/2020/02/2fa-attrs-no-longer-editable-via-update-user-endpoint
---

After reviewing the security considerations, we removed the ability for Users with the `superuser` role to toggle the `two_factor_auth_enabled` attribute via the [Update User](https://www.fastly.com/documentation/reference/api/account/user#update-user) API endpoint. This change is effective now.

You can enable 2FA on your user account by following the instructions in the guide, [Enabling and disabling two-factor authentication](https://www.fastly.com/documentation/guides/account-info/account-management/managing-two-factor-authentication/).