> For the complete documentation index, see [llms.txt](https://docs.donatepr.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.donatepr.com/communities/collective-settings/security.md).

# Security

Organizations and communities can opt-in to enforce 2FA for all their admins. Any attempt at triggering admin operations or visiting the admin pages will be blocked until the admins enable 2FA on their profiles.\
\
Projects and events inherit the 2FA settings from their parents.

### How to enforce 2FA for all admins

1. Click on the user menu<br>

<figure><img src="/files/SlzJmpcwTAaSyEjWzoeN" alt=""><figcaption></figcaption></figure>

2\. Click on the settings icon next to the profile you want to enable "Enforce 2FA" for

<figure><img src="/files/aUYAbWX0ltaTGLajexZO" alt=""><figcaption></figcaption></figure>

3\. Click on Settings -> "Security"

<figure><img src="/files/r6iaYTnT5IVnW231eQP0" alt=""><figcaption></figcaption></figure>

**4. Check "All admins must have two-factor authentication"**

<figure><img src="/files/H1V06A6OpHmDSBuSc033" alt=""><figcaption></figcaption></figure>

**5. Click on Save**

**When visiting admin pages without 2FA, admins will be prompted to enable it**

![image](https://user-images.githubusercontent.com/1556356/202162859-7e9cf92e-cb93-49fe-975d-701e7c0b76e6.png)
