Disable 2FA on Development Environments

[truekasun]

Wondering if there’s a way to disable recent addition to Ghost, 2FA on development environments.

[vikaspotluri123]

Here’s a breakdown:

Can't login to admin dashboard on more than one device

There are two new features: Device Verification (on by default) protects your sites from logins on new devices and Email 2FA, which you can additionally enable in settings - this enforces codes for every login. Ghost lacks a lot of features without SMTP mail configured, including inviting staff, password resets, email notifications and more, as well as this new security feature. There’s definitely some rough edges for us to iron out around making it easier to check and get SMTP configured - we…

[truekasun]

Thanks @vikaspotluri123 really appreciate it.

---

The direct answer (for anyone who’s looking for the same)

We can disable this by adding the following to the ghost configuration file.

"security": {
    "staffDeviceVerification": false
}