You can disable it globally by adding this to your config.php file: PHP: $config['enableTfa'] = false;