This should also work with contact logins CORE-627

Needs a new task

—
Under the client "Edit My Information" page, break the following sections down into tabs.

• Contact Information
• Billing Information (client only)
• Additional Settings (client only)
• Authentication (change password and setup/disable 2FA)
  —

2FA will then be configurable under the "Authentication" tab.

Admin users need to be able to disable 2FA for clients and contacts. If a client/contact is loses their key, disabling it will allow them to log in and set it up again.

Admins should not be able to see the 2FA key, only turn it off if it has been set up.

When saving the auth password for the first time, it's easy to get confused when receiving the error "Invalid password."

That error may need to be more specific. Although the OTP password was correct, the user needs to also enter their current account password before the changes can be saved, hence the "Invalid password" error.

When saving the auth password for the first time, it's easy to get confused when receiving the error "Invalid password."

That error may need to be more specific. Although the OTP password was correct, the user needs to also enter their current account password before the changes can be saved, hence the "Invalid password" error.

Any improvements I think should be added as new tasks.