# Disable 2FA

**URL:** <https://community.hubspot.com/t/disable-2fa/25504>\
**Category:** Account & Settings\
**Tags:** account, login\
**Created:** [September 16, 2020, 1:17am UTC](https://community.hubspot.com/t/disable-2fa/25504 "2020-09-16T01:17:38Z")\
**Posts on this page:** 19\
**Page:** 1

<div class="post-metadata">

**Author:** ![EC2020](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/ec2020/32/22074_2.png) [@EC2020](https://community.hubspot.com/u/EC2020)\
**Post date:** [September 16, 2020, 1:17am UTC](https://community.hubspot.com/t/disable-2fa/25504/1 "2020-09-16T01:17:38Z")

</div>

Hello,

We would like to disable 2FA, could you please help?

---

<div class="post-metadata">

**Author:** ![karstenkoehler](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/karstenkoehler/32/68554_2.png) [@karstenkoehler](https://community.hubspot.com/u/karstenkoehler)\
**Post date:** [September 16, 2020, 5:27am UTC](https://community.hubspot.com/t/disable-2fa/25504/2 "2020-09-16T05:27:54Z")

</div>

Hi @EC2020,

You should be able to disable two-factor authentication by clicking the settings icon, followed by “Security” in the left sidebar menu. Under “Two-factor authentification”, I can see “Remove Google Authentication” in my account.

If you’ve locked yourself out and your not the super admin, you can request a 2FA reset from a super admin in your portal.

If you are the super admin and have locked yourself out, you should navigate to the login screen and click “Lost your authentication device” on the login screen: [Set up two-factor authentication for your HubSpot login](https://knowledge.hubspot.com/account/two-factor-authentication-faq)

You’ll be redirected to a page where you can send an email to HubSpot. The HubSpot team will then ask you to fill out a form to verify your identity.

Hope this helps!

---

<div class="post-metadata">

**Author:** ![EC2020](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/ec2020/32/22074_2.png) [@EC2020](https://community.hubspot.com/u/EC2020)\
**Post date:** [September 16, 2020, 5:46am UTC](https://community.hubspot.com/t/disable-2fa/25504/3 "2020-09-16T05:46:54Z")

</div>

Hi Karsten,

I clicked into Security and it asks if we want to enable Two factor authentication, so we don’t have it currently enabled. But we still get messages like the following every now and then when we log in:

| 675597 is your HubSpot Log In Code

| |

* * *

| |

 |

We noticed something different about your log in. We’re just making sure it’s you. Use this single-use code to log in to your HubSpot account. Your code will expire if not used promptly. No one at HubSpot will ask you for your log in code.

---

<div class="post-metadata">

**Author:** ![karstenkoehler](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/karstenkoehler/32/68554_2.png) [@karstenkoehler](https://community.hubspot.com/u/karstenkoehler)\
**Post date:** [September 16, 2020, 5:53am UTC](https://community.hubspot.com/t/disable-2fa/25504/4 "2020-09-16T05:53:18Z")

</div>

Hello @EC2020,

This is one of many ways by which HubSpot is preventing fraudulent behavior. If your login activity differs from previous logins, that could be a sign that someone else is trying to get access to your account. HubSpot is just making sure it’s you. (You won’t be able to deactive this.)

Best,

Karsten

---

<div class="post-metadata">

**Author:** ![Mo](https://avatars.discourse-cdn.com/v4/letter/m/f4b2a3/32.png) [@Mo](https://community.hubspot.com/u/Mo)\
**Post date:** [June 21, 2022, 3:02pm UTC](https://community.hubspot.com/t/disable-2fa/25504/5 "2022-06-21T15:02:36Z")

</div>

Thanks! but what if login activity is not different from previous logins, but it’s still asking to enter the code? Same computer, same browser, still asks for code everytime?!

---

<div class="post-metadata">

**Author:** ![DevonG](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/devong/32/5009_2.png) [@DevonG](https://community.hubspot.com/u/DevonG)\
**Post date:** [March 21, 2023, 7:24pm UTC](https://community.hubspot.com/t/disable-2fa/25504/6 "2023-03-21T19:24:38Z")

</div>

They won’t share these heuristic parameters publicly as it would expose their security tactics to bad actors.

---

<div class="post-metadata">

**Author:** ![GSchussel](https://avatars.discourse-cdn.com/v4/letter/g/eb9ed0/32.png) [@GSchussel](https://community.hubspot.com/u/GSchussel)\
**Post date:** [December 9, 2021, 11:22am UTC](https://community.hubspot.com/t/disable-2fa/25504/7 "2021-12-09T11:22:00Z")

</div>

Same question…

It is alwasy me. Same way of athentification, same computer, same day etc.

But it always asks for the code if the browser was closed. That´s very annoying!  
Once per day would be enough…

Any sugestions how I could tell “hubspot” that it is me?

---

<div class="post-metadata">

**Author:** ![vincentemartine](https://avatars.discourse-cdn.com/v4/letter/v/c89c15/32.png) [@vincentemartine](https://community.hubspot.com/u/vincentemartine)\
**Post date:** [September 9, 2022, 10:45am UTC](https://community.hubspot.com/t/disable-2fa/25504/8 "2022-09-09T10:45:23Z")

</div>

You can see “Remove Google Authentication”, but I can’t. Should I remove security app or should I remove SMS?

 ![vincentemartine_0-1662720237184.png](https://d2qpr2jzcazej7.cloudfront.net/original/3X/e/5/e5d4795973a86e9d04930cb230c30daabfd2164d.png)

---

<div class="post-metadata">

**Author:** ![NMorse](https://avatars.discourse-cdn.com/v4/letter/n/43a26b/32.png) [@NMorse](https://community.hubspot.com/u/NMorse)\
**Post date:** [March 17, 2023, 10:16am UTC](https://community.hubspot.com/t/disable-2fa/25504/9 "2023-03-17T10:16:11Z")

</div>

I am super admin and i am looking for this 2fa reset and unable to find

---

<div class="post-metadata">

**Author:** ![Ray\_1](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/ray_1/32/48356_2.png) [@Ray\_1](https://community.hubspot.com/u/Ray_1)\
**Post date:** [March 15, 2021, 9:06pm UTC](https://community.hubspot.com/t/disable-2fa/25504/10 "2021-03-15T21:06:19Z")

</div>

I see there is an easy way to access your own 2FA, but what about other users? They aren’t a super admin, so they can’t use the function mentioned for “Lost your authentication device”. Shouldn’t a super admin be able to reset 2FA for users?

---

<div class="post-metadata">

**Author:** ![DevonG](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/devong/32/5009_2.png) [@DevonG](https://community.hubspot.com/u/DevonG)\
**Post date:** [March 21, 2023, 7:25pm UTC](https://community.hubspot.com/t/disable-2fa/25504/11 "2023-03-21T19:25:51Z")

</div>

For anyone else reading this, please upvote this feature request here [https://community.hubspot.com/t5/HubSpot-Ideas/Need-to-disable-two-factor-authentication-for-a-user/idc-p/771961](https://community.hubspot.com/t5/HubSpot-Ideas/Need-to-disable-two-factor-authentication-for-a-user/idc-p/771961)

---

<div class="post-metadata">

**Author:** ![karstenkoehler](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/karstenkoehler/32/68554_2.png) [@karstenkoehler](https://community.hubspot.com/u/karstenkoehler)\
**Post date:** [March 16, 2021, 5:29am UTC](https://community.hubspot.com/t/disable-2fa/25504/12 "2021-03-16T05:29:13Z")

</div>

Hi [@Ray\_](https://community.hubspot.com/t5/user/viewprofilepage/user-id/131257),

Users who want to reset their 2FA can work with a super admin, see here: [Reset your two-factor authentication](https://knowledge.hubspot.com/account/reset-your-two-factor-authentication)

Best regards!

---

<div class="post-metadata">

**Author:** ![TDelegate](https://avatars.discourse-cdn.com/v4/letter/t/258eb7/32.png) [@TDelegate](https://community.hubspot.com/u/TDelegate)\
**Post date:** [August 1, 2022, 9:55pm UTC](https://community.hubspot.com/t/disable-2fa/25504/13 "2022-08-01T21:55:41Z")

</div>

We need to disable 2FA for all Users on our account. I am a Super User but am unable to just uncheck the "Require Two Factor Authentication (2MFA) field on the Account\>Account Default\>Security tab. How can we get this removed? Thank you!

---

<div class="post-metadata">

**Author:** ![DianaGomez](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/dianagomez/32/48035_2.png) [@DianaGomez](https://community.hubspot.com/u/DianaGomez)\
**Post date:** [August 1, 2022, 11:41pm UTC](https://community.hubspot.com/t/disable-2fa/25504/14 "2022-08-01T23:41:54Z")

</div>

Hi @TDelegate hope you are doing well!

If you’re a [Super Admin](https://knowledge.hubspot.com/settings/hubspot-user-permissions-guide#super-admin) or have [permissions to edit account defaults](https://knowledge.hubspot.com/articles/kcs_article/settings/hubspot-user-roles-guide#admin), you can require every user in the account to use two-factor authentication or not.

You can follow the instructions on this [article](https://knowledge.hubspot.com/account/how-can-i-set-up-two-factor-authentication-for-my-hubspot-login#:~:text=your%20secondary%20method.-,Require%20two%2Dfactor%20authentication%20for%20all%20users,-If%20you%27re%20a). Just that this time you will uncheck the option rather than check it.

Hope this helps,

Diana

---

<div class="post-metadata">

**Author:** ![Eric95](https://avatars.discourse-cdn.com/v4/letter/e/c77e96/32.png) [@Eric95](https://community.hubspot.com/u/Eric95)\
**Post date:** [August 19, 2022, 9:28am UTC](https://community.hubspot.com/t/disable-2fa/25504/15 "2022-08-19T09:28:39Z")

</div>

Hi @DianaGomez

I have Super Admin rights, I followed your instructions.  
But I can’t unstick it

 ![can not unstick.jpg](https://d2qpr2jzcazej7.cloudfront.net/original/2X/3/3a09fef1c192fa12505b04d99dfaac2848804def.jpeg)

---

<div class="post-metadata">

**Author:** ![DianaGomez](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/dianagomez/32/48035_2.png) [@DianaGomez](https://community.hubspot.com/u/DianaGomez)\
**Post date:** [August 19, 2022, 6:11pm UTC](https://community.hubspot.com/t/disable-2fa/25504/16 "2022-08-19T18:11:20Z")

</div>

Hi @Eric95 thank you so much for the details 🙂

After investigated I have confirmed that **once that Require two-factor authentication for all users is checked** there is no way to turn it off as it’s generally recommended that everyone use 2FA for security.

Since 2FA is a setting on the user lever, each user will need to disable it in their own account - they should be able to disable two-factor authentication by following the steps listed [below.](http://below.in/) In your HubSpot account, click the settings icon settings in the main navigation bar. In the left sidebar menu, click Security. In the Two-factor authentication section, click Remove SMS. In the dialog box, click Turn off.

Hope this clarifies,

Diana

---

<div class="post-metadata">

**Author:** ![nematolah](https://avatars.discourse-cdn.com/v4/letter/n/54ee81/32.png) [@nematolah](https://community.hubspot.com/u/nematolah)\
**Post date:** [January 26, 2025, 8:27pm UTC](https://community.hubspot.com/t/disable-2fa/25504/17 "2025-01-26T20:27:25Z")

</div>

that did not work for us, the user has no option.

---

<div class="post-metadata">

**Author:** ![MGonzales2](https://avatars.discourse-cdn.com/v4/letter/m/b5e925/32.png) [@MGonzales2](https://community.hubspot.com/u/MGonzales2)\
**Post date:** [January 25, 2023, 3:30pm UTC](https://community.hubspot.com/t/disable-2fa/25504/18 "2023-01-25T15:30:59Z")

</div>

I am the Super Admin on a Marketing Pro account and the 2FA is very problematic for us. Our sales team uses a different CRM that niché industry specific. But in order for us to use Hubspot to its fullest capabilities I have created user accounts for all the sales team. The problem part is…I’m the one customizing setting up their account. But, with 2FA enforced I have to set it up to send a SMS to my phone. This means if I leave, the whole org is \*\*bleep\*\*. 2FA to their email isn’t responsive enough because it times out too quickly (I’ve tried). And 2FA on an app isn’t ideal since they ever actually use or log into Hubspot except once every 3 months when the Exchange Server requires them to change their password.

I tried disabling 2FA but that was disastrous, because it defaulted the 2FA to their email, so I had to call all 15 reps around the USA to reset up the 2FA with SMS.

There’s gotta be another way. But what?

---

<div class="post-metadata">

**Author:** ![DevonG](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/devong/32/5009_2.png) [@DevonG](https://community.hubspot.com/u/DevonG)\
**Post date:** [March 21, 2023, 7:36pm UTC](https://community.hubspot.com/t/disable-2fa/25504/19 "2023-03-21T19:36:33Z")

</div>

I don’t think HS had this use case in mind, of setting up users ahead of time. HS intends for each user to be setup by the users themselves.

The alternative would be to save the backup codes for each account created and share that with the user so they can reset 2FA after logging in.
