{"id":9460,"date":"2026-04-15T08:00:00","date_gmt":"2026-04-15T07:00:00","guid":{"rendered":"https:\/\/churchtools.academy\/?post_type=docs&#038;p=9460"},"modified":"2025-02-05T10:52:01","modified_gmt":"2025-02-05T09:52:01","password":"","slug":"22-two-factor-authentication","status":"publish","type":"docs","link":"https:\/\/churchtools.academy\/en\/help\/my-churchtools\/register-and-log-in-en\/22-two-factor-authentication\/","title":{"rendered":"Two-factor authentication"},"content":{"rendered":"\n<p><strong>Two-factor authentication (2FA)<\/strong> is a way to make your login to ChurchTools even more secure.<br>In addition to entering your password, this authentication requires you to enter a six-digit confirmation code, which is generated in a suitable app (e.g. <a href=\"https:\/\/play.google.com\/store\/apps\/details?id=com.google.android.apps.authenticator2&amp;pli=1\">Google Authenticator<\/a> or <a href=\"https:\/\/apps.apple.com\/de\/app\/freeotp-authenticator\/id872559395\">FreeOTP Authenticator<\/a> ).<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Activation for your own user account<\/h2>\n\n\n\n<p>You can activate the two-factor authentication for your own user account in your <em>profile<\/em> and then follow the instructions for setting it up.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img fetchpriority=\"high\" decoding=\"async\" width=\"940\" height=\"216\" src=\"https:\/\/churchtools.academy\/wp-content\/uploads\/2023\/12\/image.png\" alt=\"\" class=\"wp-image-13433\" srcset=\"https:\/\/churchtools.academy\/wp-content\/uploads\/2023\/12\/image.png 940w, https:\/\/churchtools.academy\/wp-content\/uploads\/2023\/12\/image-300x69.png 300w, https:\/\/churchtools.academy\/wp-content\/uploads\/2023\/12\/image-768x176.png 768w, https:\/\/churchtools.academy\/wp-content\/uploads\/2023\/12\/image-360x83.png 360w\" sizes=\"(max-width: 940px) 100vw, 940px\" \/><\/figure>\n\n\n\n<p> &nbsp;<\/p>\n\n\n\n<aside class=\"wp-block-group ct-box ct-box-blue has-background is-vertical is-layout-flex wp-container-core-group-is-layout-002f1c27 wp-block-group-is-layout-flex\" style=\"border-radius:8px;border-left-color:#22c55e;border-left-width:0.5rem;background-color:#dcfce7;margin-top:var(--wp--preset--spacing--60);margin-bottom:var(--wp--preset--spacing--60)\">\n<p style=\"margin-top:0.5rem;margin-right:0.5rem;margin-bottom:0rem;margin-left:0.5rem\"><strong>Tip<\/strong><\/p>\n\n\n\n<p style=\"margin-top:0rem;margin-right:0.5rem;margin-bottom:0.5rem;margin-left:0.5rem\">If you change your smartphone, switch off 2FA in your profile beforehand. Then log in to ChurchTools with your new smartphone and set up 2FA again. You do not need to change your password.<\/p>\n<\/aside>\n\n\n\n<h2 class=\"wp-block-heading\">Enforced by the administrator for certain user accounts<\/h2>\n\n\n\n<p>If you are an admin of your ChurchTools, you can force the two-factor authentication for certain users, provided you have the administration permission <code>administer persons<\/code> or <code>simulate persons<\/code>. This is useful if a person has a lot of permissions and their user account should be better protected.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Enforced for individual persons<\/h3>\n\n\n\n<p>As an admin you can set up the two-factor authentication to be required for each person separately. This is done in <strong>Persons &amp; Groups<\/strong>, where you click on the pencil next to <em>Permissions<\/em> in the person detail view. A window will now open and you can select <em>Enforce two-factor authentication<\/em>. The next time the person logs in, they will be asked to set up 2FA.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><img decoding=\"async\" src=\"https:\/\/help.church.tools\/images\/158986\/4362e67d11bc34f37642b2d8caf166236c6fa3ca18406e7d2c86253ae882b233?fit=max&amp;fm=png&amp;h=0&amp;w=940\" alt=\"\"><br>Enforce for certain roles in a group<\/h3>\n\n\n\n<p>You can also link the enforcement of the two-factor authentication to specific roles in a single group. To set this up, go to <strong>Persons &amp; groups<\/strong> and click on <em>Configure roles<\/em> on the right-hand side of a group.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" width=\"484\" height=\"548\" src=\"https:\/\/churchtools.academy\/wp-content\/uploads\/2023\/12\/image-1.png\" alt=\"\" class=\"wp-image-13435\" srcset=\"https:\/\/churchtools.academy\/wp-content\/uploads\/2023\/12\/image-1.png 484w, https:\/\/churchtools.academy\/wp-content\/uploads\/2023\/12\/image-1-265x300.png 265w, https:\/\/churchtools.academy\/wp-content\/uploads\/2023\/12\/image-1-360x408.png 360w\" sizes=\"(max-width: 484px) 100vw, 484px\" \/><\/figure>\n\n\n\n<p>Now you can decide for each role in this group whether the <em>two-factor authentication should be enforced<\/em>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><img decoding=\"async\" src=\"https:\/\/help.church.tools\/images\/158992\/28069cd9496c591a7b0f1298580dfa4160aeb032f2cf8a96593f7aa85a9697c1?fit=max&amp;fm=png&amp;h=0&amp;w=940\" alt=\"\"><br>Filter two-factor authentication<\/h2>\n\n\n\n<p>As an admin with the <code>administer persons<\/code> permission, you can use <em>More filter<\/em> in the <strong>Persons &amp; groups<\/strong> module to filter for which user accounts 2FA is activated and for which it is not yet activated.<\/p>\n\n\n\n<p><img decoding=\"async\" src=\"https:\/\/help.church.tools\/images\/158995\/df85f61550246cabb211970063c4de97dc280cff7f54a2376065d5a7e6439c7e?fit=max&amp;fm=png&amp;h=0&amp;w=940\" alt=\"\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Two-factor authentication (2FA) is a way to make your login to ChurchTools even more secure.In addition to entering your password, this authentication requires you to enter a six-digit confirmation code, which is generated in a suitable app (e.g. Google Authenticator or FreeOTP Authenticator ). Activation for your own user account You can activate the two-factor [&hellip;]<\/p>\n","protected":false},"author":6,"featured_media":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"doc_category":[603],"doc_tag":[],"knowledge_base":[601],"class_list":["post-9460","docs","type-docs","status-publish","hentry","doc_category-register-and-log-in-en","knowledge_base-my-churchtools"],"pp_statuses_selecting_workflow":false,"pp_workflow_action":"current","pp_status_selection":"publish","acf":[],"year_month":"2026-04","word_count":300,"total_views":"2206","reactions":{"happy":"0","normal":"0","sad":"0"},"author_info":{"name":"Jasper Stehmeier","author_nicename":"jstehmeier","author_url":"https:\/\/churchtools.academy\/en\/author\/jstehmeier\/"},"doc_category_info":[{"term_name":"Register and log in","term_url":"https:\/\/churchtools.academy\/en\/help\/my-churchtools\/register-and-log-in-en\/"}],"doc_tag_info":[],"knowledge_base_info":[{"term_name":"My ChurchTools","term_url":"https:\/\/churchtools.academy\/en\/help\/my-churchtools\/","term_slug":"my-churchtools"}],"knowledge_base_slug":["my-churchtools"],"_links":{"self":[{"href":"https:\/\/churchtools.academy\/en\/wp-json\/wp\/v2\/docs\/9460","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/churchtools.academy\/en\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/churchtools.academy\/en\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/churchtools.academy\/en\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/churchtools.academy\/en\/wp-json\/wp\/v2\/comments?post=9460"}],"version-history":[{"count":2,"href":"https:\/\/churchtools.academy\/en\/wp-json\/wp\/v2\/docs\/9460\/revisions"}],"predecessor-version":[{"id":13504,"href":"https:\/\/churchtools.academy\/en\/wp-json\/wp\/v2\/docs\/9460\/revisions\/13504"}],"wp:attachment":[{"href":"https:\/\/churchtools.academy\/en\/wp-json\/wp\/v2\/media?parent=9460"}],"wp:term":[{"taxonomy":"doc_category","embeddable":true,"href":"https:\/\/churchtools.academy\/en\/wp-json\/wp\/v2\/doc_category?post=9460"},{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/churchtools.academy\/en\/wp-json\/wp\/v2\/doc_tag?post=9460"},{"taxonomy":"knowledge_base","embeddable":true,"href":"https:\/\/churchtools.academy\/en\/wp-json\/wp\/v2\/knowledge_base?post=9460"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}