Two-factor sign-in is off
Weik.io 2026.2Platform administrators who sign in with a password aren't asked for a code from an authenticator app, because the installation's setting for it is off.
| Kind | Severity | Who sees it |
|---|---|---|
two- |
Warning | Platform administrators, in a list that isn’t narrowed to an environment or a project |
What it means#
Platform administrators who sign in with a password don’t have to give a code from an authenticator app. A stolen password is then enough to sign in as a platform administrator.
What raises it#
The installation’s twoFactorRequired setting is off. It is on in a new installation, so the problem shows only after someone turns it off.
What to check#
See the installation’s sign-in settings:
$ weikio settings getHow to fix it#
Turn it on again, from the CLI or on Settings > Installation in the admin UI:
$ weikio settings set --two-factor-required=truePlatform administrators who haven’t set up an authenticator app yet are asked to set one up at their next sign-in. People who sign in through an identity provider follow that provider’s own multi-factor rules.