Reset Multi-Factor-Authentification (MFA) in user settings through the UI #5291

New Issue

OVERLORD · 2026-02-05T09:54:26+03:00

OVERLORD commented

2026-02-05 09:54:26 +03:00

Originally created by @it-management-stadtbetrieb on GitHub (May 21, 2025).

Describe the feature you'd like

Summary:
Add a feature to the BookStack web interface that allows administrators to reset two-factor authentication (2FA) for users directly through the UI.

Use Case:
Currently, when a user changes their mobile device and loses access to their 2FA app, there is no way to reset their 2FA settings via the web interface.
As a result, even BookStack administrators must access the server console and manually execute artisan commands to reset a user's 2FA configuration.
This is not feasible in environments where BookStack is hosted as a managed SaaS solution and administrators do not have console access.

Proposed Solution:
Add an option within the admin user management interface to reset 2FA for individual users. This option could be placed in the user's profile or settings page and be accessible only to users with appropriate admin-level permissions.

Describe the benefits this would bring to existing BookStack users

Improves usability for administrators in SaaS or restricted environments
Reduces dependency on console access for routine account management tasks
Aligns 2FA management with modern admin expectations for web applications
Enhances user support and account recovery processes

Can the goal of this request already be achieved via other means?

BookStack administrators must access the server console and manually execute artisan commands to reset a user's 2FA configuration.

Additional context

This would be especially helpful in managed BookStack instances where the administrator role is functionally limited to the web interface, and server-level access is not available.

Originally created by @it-management-stadtbetrieb on GitHub (May 21, 2025). ### Describe the feature you'd like Summary: Add a feature to the BookStack web interface that allows administrators to reset two-factor authentication (2FA) for users directly through the UI. Use Case: Currently, when a user changes their mobile device and loses access to their 2FA app, there is no way to reset their 2FA settings via the web interface. As a result, even BookStack administrators must access the server console and manually execute artisan commands to reset a user's 2FA configuration. This is not feasible in environments where BookStack is hosted as a managed SaaS solution and administrators do not have console access. Proposed Solution: Add an option within the admin user management interface to reset 2FA for individual users. This option could be placed in the user's profile or settings page and be accessible only to users with appropriate admin-level permissions. ### Describe the benefits this would bring to existing BookStack users - Improves usability for administrators in SaaS or restricted environments - Reduces dependency on console access for routine account management tasks - Aligns 2FA management with modern admin expectations for web applications - Enhances user support and account recovery processes ### Can the goal of this request already be achieved via other means? BookStack administrators must access the server console and manually execute artisan commands to reset a user's 2FA configuration. ### Additional context This would be especially helpful in managed BookStack instances where the administrator role is functionally limited to the web interface, and server-level access is not available.

OVERLORD added the 🔨 Feature Request label 2026-02-05 09:54:26 +03:00

OVERLORD referenced this issue

2026-02-05 10:32:59 +03:00

[PR #5291] [MERGED] fix tests namespace definition #6464

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/BookStack#5291