# Can't find 2FA in self hosted docker version of Ghost - 6.22.1

**URL:** <https://forum.ghost.org/t/cant-find-2fa-in-self-hosted-docker-version-of-ghost-6-22-1/62269>\
**Category:** Using Ghost\
**Created:** [March 25, 2026, 12:44am UTC](https://forum.ghost.org/t/cant-find-2fa-in-self-hosted-docker-version-of-ghost-6-22-1/62269 "2026-03-25T00:44:00Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![XeonJackson](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/xeonjackson/32/39994_2.png) [@XeonJackson](https://forum.ghost.org/u/XeonJackson)\
**Post date:** [March 25, 2026, 12:44am UTC](https://forum.ghost.org/t/cant-find-2fa-in-self-hosted-docker-version-of-ghost-6-22-1/62269/1 "2026-03-25T00:44:00Z")

</div>

Hello, I have just setup Ghost instance using Docker and a locally self hosted instance.  
While I have succeeded in getting Ghost stood up, I can’t seem to located the 2FA slider within the “Staff” settings. I have looked at various posts on this forum and the web but cannot seem to get this to appear or work. I looked at this: [2FA auth slider is missing? - #4 by vikaspotluri123](https://forum.ghost.org/t/2fa-auth-slider-is-missing/56734/4) But that was no longer helpful in this version of Ghost. Can you all provide assistance?

---

<div class="post-metadata">

**Author:** ![KBExit](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/kbexit/32/38359_2.png) [@KBExit](https://forum.ghost.org/u/KBExit)\
**Post date:** [March 25, 2026, 1:31am UTC](https://forum.ghost.org/t/cant-find-2fa-in-self-hosted-docker-version-of-ghost-6-22-1/62269/2 "2026-03-25T01:31:21Z")

</div>

It’s in the Ghost Dashboard \> Settings and scroll down to Staff. It is listed under the staff members.  
This is available on my site on the latest update.

 ![1000022620](https://us1.discourse-cdn.com/flex015/uploads/ghost2/original/3X/0/8/082c1d45fd8e1bd0d6554f04d5d4b49c96475750.png)

---

<div class="post-metadata">

**Author:** ![XeonJackson](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/xeonjackson/32/39994_2.png) [@XeonJackson](https://forum.ghost.org/u/XeonJackson)\
**Post date:** [March 25, 2026, 10:06am UTC](https://forum.ghost.org/t/cant-find-2fa-in-self-hosted-docker-version-of-ghost-6-22-1/62269/3 "2026-03-25T10:06:48Z")

</div>

@KBExit - Thank you for the reply. When I go to Settings \> Staff under the “Owner” Admin account this is what I see. I redacted the usernames and email addresses for security purposes.

But I don’t see a slider for 2FA.

This is where I am looking: [www.domain.com/ghost/#/settings/staff](http://www.domain.com/ghost/#/settings/staff)

Is there something I am missing?

Please advise.

 ![image](https://us1.discourse-cdn.com/flex015/uploads/ghost2/original/3X/9/4/94c64a8e40c175088bd933d27edcf09957f7bcc1.png)

And under the user’s settings for Owner I don’t see it either.

I couldn’t post an image for that, but there isn’t a slider or setting under the actual settings of each user either.

---

<div class="post-metadata">

**Author:** ![KBExit](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/kbexit/32/38359_2.png) [@KBExit](https://forum.ghost.org/u/KBExit)\
**Post date:** [March 25, 2026, 9:54pm UTC](https://forum.ghost.org/t/cant-find-2fa-in-self-hosted-docker-version-of-ghost-6-22-1/62269/4 "2026-03-25T21:54:15Z")

</div>

You know what? I am willing to bet that you don’t have SMTP configured via .env in your docker configuration. This means your guests aren’t registering due to no transactional emails working and Ghost cannot send you 2FA codes to login.

---

<div class="post-metadata">

**Author:** ![XeonJackson](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/xeonjackson/32/39994_2.png) [@XeonJackson](https://forum.ghost.org/u/XeonJackson)\
**Post date:** [March 26, 2026, 11:07am UTC](https://forum.ghost.org/t/cant-find-2fa-in-self-hosted-docker-version-of-ghost-6-22-1/62269/5 "2026-03-26T11:07:47Z")

</div>

@KBExit - I looked at my .env file and I do have SMTP configured per my SMTP provider’s recommended settings. I am using Brevo.. Is that the issue? Should I try a different provider?

 ![image](https://us1.discourse-cdn.com/flex015/uploads/ghost2/original/3X/a/f/af5d838faa7cfb7719506e070f2df625ad42c901.png)

---

<div class="post-metadata">

**Author:** ![Cathy\_Sarisky](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/cathy_sarisky/32/25750_2.png) [@Cathy\_Sarisky](https://forum.ghost.org/u/Cathy_Sarisky)\
**Post date:** [March 26, 2026, 11:37am UTC](https://forum.ghost.org/t/cant-find-2fa-in-self-hosted-docker-version-of-ghost-6-22-1/62269/6 "2026-03-26T11:37:48Z")

</div>

Any chance you have security\_\_staffDeviceVerification set? I’m

Wondering if it being set to false in the env file stops the toggle from appearing…

---

<div class="post-metadata">

**Author:** ![XeonJackson](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/xeonjackson/32/39994_2.png) [@XeonJackson](https://forum.ghost.org/u/XeonJackson)\
**Post date:** [March 26, 2026, 11:55am UTC](https://forum.ghost.org/t/cant-find-2fa-in-self-hosted-docker-version-of-ghost-6-22-1/62269/7 "2026-03-26T11:55:44Z")

</div>

Hi @Cathy_Sarisky - I grep’ed my .env and compose.yml files but couldn’t find security\_\_staffDeviceVerification value.

However, I went into the running container instance and found this in the config.production.json.

_“security”: {  
“staffDeviceVerification”: false  
},_

How can I adjust this value permanently outside the container?

I am an new to the Ghost setup, and don’t fully comprehend the setup using the .env files yet.

Thanks,

---

<div class="post-metadata">

**Author:** ![XeonJackson](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/xeonjackson/32/39994_2.png) [@XeonJackson](https://forum.ghost.org/u/XeonJackson)\
**Post date:** [March 26, 2026, 12:19pm UTC](https://forum.ghost.org/t/cant-find-2fa-in-self-hosted-docker-version-of-ghost-6-22-1/62269/8 "2026-03-26T12:19:46Z")

</div>

@Cathy_Sarisky / @KBExit - I found a post on Reddit that spoke to how to edit the .env file to turn on this feature.

```auto
# Additional Mail Config
security__staffDeviceVerification=true

```

However, I am having an additional issue that I can’t seem to solve.  
The mail transport is set to “direct”. I have it set in my .env file to SMTP.

But no matter what I do it seems to be stuck on “direct”.

Is there a way to override this?

```auto
  "mail": {
    "transport": "Direct"
  },

```

---

<div class="post-metadata">

**Author:** ![XeonJackson](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/xeonjackson/32/39994_2.png) [@XeonJackson](https://forum.ghost.org/u/XeonJackson)\
**Post date:** [March 26, 2026, 1:00pm UTC](https://forum.ghost.org/t/cant-find-2fa-in-self-hosted-docker-version-of-ghost-6-22-1/62269/9 "2026-03-26T13:00:00Z")

</div>

@Cathy_Sarisky & @KBExit - I got it sorted by rebuilding the container from the ground up. I now see the 2FA slider on the Staff page and the verification email works!

Thanks for all your guidance.
