3 ms·
Do Mastodon's internal tools allow administrators to circumvent 2FA?
by css 6y ago
Do Mastodon's internal tools allow administrators to circumvent 2FA?
- throwanem 6y agoNot directly. You can do it with access to the instance's Postgres database, but I'd expect relatively few instance admins (as opposed to instance owners) to have that; the admin tools don't include a database console, and you can't use a credential for the admin tools to authenticate to the database.
- Deukhoofd 6y agotootctl accounts modify USERNAME --disable-2fa --reset-password Then check your mail server for outgoing mail, and use the mail sent to the user to change the password.
- robjan 6y agoIf you are the instance owner you can do whatever you want. Additionally, many instances are installed on a single host (https://masto.host https://masto.host) and almost all instances are on VPS in various managed clouds.