Once a two factor authentication service has been activated,  clients and/or staff can be forced to set up two factor authentication before being allowed access to the client or admin areas:

1. Login to your WHMCS Administration Area

2. Navigate to Setup > Staff Management > Two-Factor Authentication

3. Scroll to the Global Two-Factor Authentication Settings section

4. Tick the checkbox for the options as required. Any combination is acceptable:

• Force Client Users to enable Two Factor Authentication on Next Login
• Force Administrative Users to enable Two Factor Authentication on Next Login

6. Click Save Changes

Next time a client or staff member logs in, they will be required to set up two factor authentication.