Two-Factor Authentication

Security > 2FA (/security/2fa) enrols your own administrator account in TOTP two-factor authentication.

The page shows a QR code and the secret behind it. Scan it with an authenticator app, enter a code to prove it works, and 2FA is enabled. Disabling it is on the same page.

This is the setup flow for the account you are signed in as. Verifying a code at login time is part of the login form, not this page.