Does TofuPilot support two-factor authentication (2FA)?
Updated July 7, 2026
Yes. TofuPilot supports two methods: passkeys (WebAuthn backed by biometrics, phone, or a hardware key like YubiKey) and authenticator apps (TOTP from 1Password, Google Authenticator, or Authy). Enable it under Settings > Authentication and save your one-time recovery codes; you can register multiple passkeys. Admins can require 2FA for all members under Settings > Organization > Security, and SSO members satisfy the requirement when their IdP enforces 2FA upstream.
Related questions
- Can TofuPilot be self-hosted on my own servers?Yes, on the Enterprise plan. You run the dashboard, deployer, and PostgreSQL in your own infrastructure with Docker Compose, one organization per instance.…
- How do I back up a self-hosted TofuPilot instance?Your data lives in two Docker volumes: tofupilot-pg-data for the PostgreSQL database and tofupilot-seaweed-data for file storage. Back up both volumes on a…
- What are the server requirements for self-hosting TofuPilot?Ubuntu 20.04+ or Debian on x86_64, 2+ CPU cores, 4 GB RAM, 40 GB+ disk, standard root Docker (not rootless), ports 80/443 open, and three subdomains for the…
