# Login Options

![](/files/-LA-UkEFucsumAMZyVGt)

## Two Factor Authentication

In this settings pane, you can control global settings related to two-factor authentication.

### Force 2 Factor Authentication

Turning this flag on will require two-factor authentication for your app. Any users who have not enrolled will be required to enroll on their next login. Keep in mind that if you as an admin are not enrolled in two-factor and this setting is turned on you will be forced to enroll in two factor after saving this configuration.

### Trusted Device Timespan

The number of days to keep trusting a user's device. If you set this value to `0`, two factor authentication will be required on every log in.

### Default Two Factor Provider

Two factor authentication uses a provider system to allow new methods of two factor authentication to be provided via a module. A good example of this extension is [Amazon SNS Provider](https://github.com/contentbox-modules/contentbox-awssns-twofactor).

> Note that if you decide to change the default two factor provider, all currently enrolled users will be unenrolled.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://contentbox.ortusbooks.com/v3.x/usage/using-contentbox/system/settings/login-options.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
