btcpayserver/BTCPayServer/Views/Manage/TwoFactorAuthentication.cshtml

@model TwoFactorAuthenticationViewModel
@{
    ViewData.SetActivePageAndTitle(ManageNavPages.TwoFactorAuthentication, "Two-factor authentication");
}

@if (Model.Is2faEnabled)
{
    if (Model.RecoveryCodesLeft == 0)
    {
        <div class="alert alert-danger">
            <h4 class="alert-heading mb-3">
                <span class="fa fa-warning"></span>
                You have no recovery codes left.
            </h4>
            <p class="mb-0">You must <a asp-action="GenerateRecoveryCodes" class="alert-link">generate a new set of recovery codes</a> before you can log in with a recovery code.</p>
        </div>
    }
    else if (Model.RecoveryCodesLeft == 1)
    {
        <div class="alert alert-danger">
            <h4 class="alert-heading mb-3">
                <span class="fa fa-warning"></span>
                You only have 1 recovery code left.
            </h4>
            <p class="mb-0">You can <a asp-action="GenerateRecoveryCodes" class="alert-link">generate a new set of recovery codes</a>.</p>
        </div>
    }
    else if (Model.RecoveryCodesLeft <= 3)
    {
        <div class="alert alert-warning">
            <h4 class="alert-heading mb-3">
                <span class="fa fa-warning"></span>
                You only have @Model.RecoveryCodesLeft recovery codes left.
            </h4>
            <p class="mb-0">You should <a asp-action="GenerateRecoveryCodes" class="alert-link">generate a new set of recovery codes</a>.</p>
        </div>
    }
}

<div class="list-group">
    @if (Model.Is2faEnabled)
    {
        <a asp-action="Disable2fa" class="list-group-item d-flex justify-content-between align-items-center list-group-item-action py-3" data-bs-toggle="modal" data-bs-target="#ConfirmModal" data-title="Disable two-factor authentication (2FA)" data-description="Disabling 2FA does not change the keys used in the authenticator apps. If you wish to change the key used in an authenticator app you should reset your authenticator keys." data-confirm="Disable 2FA">
            <div>
                <h5>Disable 2FA</h5>
                <p class="mb-0 me-3">Disable two-factor authentication. Re-enabling will not require you to reconfigure your Authenticator app. </p>
            </div>
            <vc:icon symbol="caret-right" />
        </a>
        <a asp-action="GenerateRecoveryCodes" class="list-group-item d-flex justify-content-between align-items-center list-group-item-action py-3" data-bs-toggle="modal" data-bs-target="#ConfirmModal" data-title="Reset recovery codes" data-description="Your existing recovery codes will no longer be valid!" data-confirm="Reset">
            <div>
                <h5>Reset recovery codes</h5>
                <p class="mb-0 me-3">Regenerate your two-factor recovery codes.</p>
            </div>
            <vc:icon symbol="caret-right" />
        </a>
        <a asp-action="ResetAuthenticator" class="list-group-item d-flex justify-content-between align-items-center list-group-item-action py-3" data-bs-toggle="modal" data-bs-target="#ConfirmModal" data-title="Reset authenticator app" data-description="This process disables 2FA until you verify your authenticator app and will also reset your 2FA recovery codes. If you do not complete your authenticator app configuration you may lose access to your account." data-confirm="Reset">
            <div>
                <h5>Reset authenticator app</h5>
                <p class="mb-0 me-3">Invalidates the current authenticator configuration. Useful if you believe your authenticator settings were compromised.</p>
            </div>
            <vc:icon symbol="caret-right" />
        </a>
        <a asp-action="EnableAuthenticator" class="list-group-item d-flex justify-content-between align-items-center list-group-item-action py-3">
            <div>
                <h5>Configure Authenticator app</h5>
                <p class="mb-0 me-3">Display the key or QR code to configure an authenticator app with your current setup.</p>
            </div>
            <vc:icon symbol="caret-right" />
        </a>
    }
    else
    {
        <a asp-action="EnableAuthenticator" class="list-group-item d-flex justify-content-between align-items-center list-group-item-action py-3">
            <div>
                <h5>Enable 2FA</h5>
                <p class="mb-0 me-3">Enable two-factor authentication using TOTP with apps such as Google Authenticator.</p>
            </div>
            <vc:icon symbol="caret-right" />
        </a>
    }
</div>

<partial name="_Confirm" model="@(new ConfirmModel("Remove 2FA credential", "Your account will no longer have the credential as an option for multi-factor authentication.", "Remove"))" />