auth.2fa.reset

Resets one user's two-factor authentication for local emergency recovery.

CategorySecurity and Access
ComponentServer console
Riskcritical
Requires reasonNo
Last verified2026-07-13

Allowed Sources

Lanview ConsoleLocal Server Console

Description

Resets one user's two-factor authentication for local emergency recovery. Clears the selected user's TOTP state, recovery codes, and trusted devices after an exact confirmation phrase. Local server console or authenticated local AdminConsole pipe only. Emergency recovery path; audited loudly. Does not log recovery codes, TOTP values, or trusted-device tokens.

Syntax

auth 2fa reset <username>

Parameters

ParameterUseDescription
<username>RequiredLanview security username.

Permissions

security.manage_roles

Audit Events

Needs review

Server, Client and Studio Involvement

Needs review

Common Issues

  • The command may require an authenticated server console or named-pipe admin console session.
  • Targeted commands may fail if a device is offline, unapproved or not eligible.

Troubleshooting Notes

Needs review.