# Disable 2FA on Development Environments

**URL:** <https://forum.ghost.org/t/disable-2fa-on-development-environments/57114>\
**Category:** Developer help\
**Created:** [April 26, 2025, 6:40am UTC](https://forum.ghost.org/t/disable-2fa-on-development-environments/57114 "2025-04-26T06:40:11Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![truekasun](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/truekasun/32/20164_2.png) [@truekasun](https://forum.ghost.org/u/truekasun)\
**Post date:** [April 26, 2025, 6:40am UTC](https://forum.ghost.org/t/disable-2fa-on-development-environments/57114/1 "2025-04-26T06:40:11Z")

</div>

Wondering if there’s a way to disable recent addition to Ghost, 2FA on development environments. 🤔

---

<div class="post-metadata">

**Author:** ![vikaspotluri123](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/vikaspotluri123/32/24_2.png) [@vikaspotluri123](https://forum.ghost.org/u/vikaspotluri123)\
**Post date:** [April 27, 2025, 8:35pm UTC](https://forum.ghost.org/t/disable-2fa-on-development-environments/57114/2 "2025-04-27T20:35:54Z")

</div>

Here’s a breakdown:

> [@Can't login to admin dashboard on more than one device](https://forum.ghost.org/t/cant-login-to-admin-dashboard-on-more-than-one-device/57135/3):
>
> There are two new features: Device Verification (on by default) protects your sites from logins on new devices and Email 2FA, which you can additionally enable in settings - this enforces codes for every login. Ghost lacks a lot of features without SMTP mail configured, including inviting staff, password resets, email notifications and more, as well as this new security feature. There’s definitely some rough edges for us to iron out around making it easier to check and get SMTP configured - we…

---

<div class="post-metadata">

**Author:** ![truekasun](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/truekasun/32/20164_2.png) [@truekasun](https://forum.ghost.org/u/truekasun)\
**Post date:** [April 28, 2025, 1:40am UTC](https://forum.ghost.org/t/disable-2fa-on-development-environments/57114/3 "2025-04-28T01:40:27Z")

</div>

Thanks @vikaspotluri123 really appreciate it.

* * *

The direct answer (for anyone who’s looking for the same)

We can disable this by adding the following to the ghost configuration file.

```auto
"security": {
    "staffDeviceVerification": false
}

```

---

<div class="post-metadata">

**Author:** ![thememyghost](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/thememyghost/32/33263_2.png) [@thememyghost](https://forum.ghost.org/u/thememyghost)\
**Post date:** [June 7, 2025, 3:34am UTC](https://forum.ghost.org/t/disable-2fa-on-development-environments/57114/4 "2025-06-07T03:34:58Z")

</div>

If someone still wants to send emails in local dev, I have written an article on how to do that

> **[2FA in Ghost CMS: Update & Local Development Fix](https://www.thememyblog.com/blog/ghost-cms-two-factor-authentication-2fa-for-staff-users-fix-for-local-development-for-verification-code/)**
>
> 🚨 Ghost CMS just leveled up with 2FA for safer logins! But local devs hit a snag 😬—emails not sending? No worries! Here's how to fix it fast using Gmail & app passwords. 🛠️💌 Stay secure and keep coding without interruptions!

---

<div class="post-metadata">

**Author:** ![omichalek](https://sea1.discourse-cdn.com/flex015/user_avatar/forum.ghost.org/omichalek/32/34991_2.png) [@omichalek](https://forum.ghost.org/u/omichalek)\
**Post date:** [August 13, 2025, 4:49pm UTC](https://forum.ghost.org/t/disable-2fa-on-development-environments/57114/5 "2025-08-13T16:49:54Z")

</div>

For anyone else trying to run Ghost with Podman as Systemd unit (eg. `~/.config/containers/systemd/ghost.container`), that variable translates to

`Environment=security__staffDeviceVerification=false`

inside `[Container]` section