Hello,
We would like to disable 2FA, could you please help?
Hi @EC2020,
You should be able to disable two-factor authentication by clicking the settings icon, followed by “Security” in the left sidebar menu. Under “Two-factor authentification”, I can see “Remove Google Authentication” in my account.
If you’ve locked yourself out and your not the super admin, you can request a 2FA reset from a super admin in your portal.
If you are the super admin and have locked yourself out, you should navigate to the login screen and click “Lost your authentication device” on the login screen: Set up two-factor authentication for your HubSpot login
You’ll be redirected to a page where you can send an email to HubSpot. The HubSpot team will then ask you to fill out a form to verify your identity.
Hope this helps!
Hi Karsten,
I clicked into Security and it asks if we want to enable Two factor authentication, so we don’t have it currently enabled. But we still get messages like the following every now and then when we log in:
| 675597 is your HubSpot Log In Code
|
We noticed something different about your log in. We’re just making sure it’s you. Use this single-use code to log in to your HubSpot account. Your code will expire if not used promptly. No one at HubSpot will ask you for your log in code.
Hello @EC2020,
This is one of many ways by which HubSpot is preventing fraudulent behavior. If your login activity differs from previous logins, that could be a sign that someone else is trying to get access to your account. HubSpot is just making sure it’s you. (You won’t be able to deactive this.)
Best,
Karsten
Thanks! but what if login activity is not different from previous logins, but it’s still asking to enter the code? Same computer, same browser, still asks for code everytime?!
They won’t share these heuristic parameters publicly as it would expose their security tactics to bad actors.
Same question…
It is alwasy me. Same way of athentification, same computer, same day etc.
But it always asks for the code if the browser was closed. That´s very annoying!
Once per day would be enough…
Any sugestions how I could tell “hubspot” that it is me?
I am super admin and i am looking for this 2fa reset and unable to find
I see there is an easy way to access your own 2FA, but what about other users? They aren’t a super admin, so they can’t use the function mentioned for “Lost your authentication device”. Shouldn’t a super admin be able to reset 2FA for users?
For anyone else reading this, please upvote this feature request here https://community.hubspot.com/t5/HubSpot-Ideas/Need-to-disable-two-factor-authentication-for-a-user/idc-p/771961
Hi @Ray_,
Users who want to reset their 2FA can work with a super admin, see here: Reset your two-factor authentication
Best regards!
We need to disable 2FA for all Users on our account. I am a Super User but am unable to just uncheck the "Require Two Factor Authentication (2MFA) field on the Account>Account Default>Security tab. How can we get this removed? Thank you!
Hi @TDelegate hope you are doing well!
If you’re a Super Admin or have permissions to edit account defaults, you can require every user in the account to use two-factor authentication or not.
You can follow the instructions on this article. Just that this time you will uncheck the option rather than check it.
Hope this helps,
Diana
Hi @Eric95 thank you so much for the details 
After investigated I have confirmed that once that Require two-factor authentication for all users is checked there is no way to turn it off as it’s generally recommended that everyone use 2FA for security.
Since 2FA is a setting on the user lever, each user will need to disable it in their own account - they should be able to disable two-factor authentication by following the steps listed below. In your HubSpot account, click the settings icon settings in the main navigation bar. In the left sidebar menu, click Security. In the Two-factor authentication section, click Remove SMS. In the dialog box, click Turn off.
Hope this clarifies,
Diana
that did not work for us, the user has no option.
I am the Super Admin on a Marketing Pro account and the 2FA is very problematic for us. Our sales team uses a different CRM that niché industry specific. But in order for us to use Hubspot to its fullest capabilities I have created user accounts for all the sales team. The problem part is…I’m the one customizing setting up their account. But, with 2FA enforced I have to set it up to send a SMS to my phone. This means if I leave, the whole org is **bleep**. 2FA to their email isn’t responsive enough because it times out too quickly (I’ve tried). And 2FA on an app isn’t ideal since they ever actually use or log into Hubspot except once every 3 months when the Exchange Server requires them to change their password.
I tried disabling 2FA but that was disastrous, because it defaulted the 2FA to their email, so I had to call all 15 reps around the USA to reset up the 2FA with SMS.
There’s gotta be another way. But what?
I don’t think HS had this use case in mind, of setting up users ahead of time. HS intends for each user to be setup by the users themselves.
The alternative would be to save the backup codes for each account created and share that with the user so they can reset 2FA after logging in.