How to Reset Admin 2FA from Superadmin Print

The Admin page exposes separate 2FA status areas for the Super Admin account and the Admin account. When the Admin account has 2FA enabled and needs to be recovered, Cockpit provides a dedicated Reset Admin 2FA action.

When to Use This

• The Admin account lost access to its authenticator device.
• You need to recover Admin login access without editing files manually.
• You want to review 2FA status for both user levels from one place.
• You are doing owner-level access recovery work.

What the Admin Page Shows

• Super Admin 2FA status
• Admin 2FA status
• a dedicated Reset Admin 2FA action when the Admin account currently has 2FA enabled

Steps

1. Log in as the owner or Super Admin.
2. Open Admin.
3. Find the 2FA status section.
4. Review the Admin account status first to make sure a reset is actually needed.
5. Use Reset Admin 2FA and confirm the action.
6. Tell the Admin user to sign in again and re-enable 2FA from Settings when ready.

Expected Result

The Admin account should no longer be locked behind the old 2FA secret and can reconfigure 2FA from the Settings page afterward.

Common Mistakes

• Resetting the wrong account: Confirm you are acting on the Admin account, not the owner account.
• Using reset casually: This is a recovery tool, not a normal toggle for day-to-day use.
• Not re-enabling later: After recovery, the Admin account should still set 2FA up again.

Example Use Cases

• Lost device recovery: The Admin user changes phones and cannot complete the old 2FA prompt anymore.
• Access recovery after staff change: The owner resets Admin 2FA so the account can be re-secured by the new operator.
• Quick status review: A Super Admin checks both 2FA states from the Admin page before making account-level decisions.

Related Articles

• How to Set Up 2FA
• How to Change Account Details
• How to Review Default Credential Warnings