Can I activate 2fa permanently?

[Trust996]

Hi everyone,
just a quick question:
I have tested 2fa via google authenticator and yubikey and it works perfectly. Unfortunately the browser only asks for 2fa once. After the device is registered, it is enough to enter the password. Can I configure the browser extension to ask for 2fa every time?
Thanks

[stefan0xC]

You can switch the vault timeout action from lock to log out.

[stefan0xC]

You could also try enabling this option but I'm not sure how well it works with the browser extension:

vaultwarden/.env.template

Lines 453 to 456 in bb2412d

	## Disable 2FA remember
	## Enabling this would force the users to use a second factor to login every time.
	## Note that the checkbox would still be present, but ignored.
	# DISABLE_2FA_REMEMBER=false

[Trust996]

Thank you very much, I will test both solutions.

[vidnick]

@Trust996 were you ever able to get this to request 2fa upon every login to the extension?

Follow up to that, were you also able to stop the email New Device Logged In From Chrome from sending each day?