> For the complete documentation index, see [llms.txt](https://docs.fylr.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.fylr.io/for-administrators/readme/access.md).

# Access

## General

### Allow guest access

Allows anonymous access. When activated, the fylr instance can be accessed without having a user account.

{% hint style="info" %}
Please note: when activated, the user group "Anonymous Users" need the system right "Access to Search" and permissions to the data. Using pools and tags, you can either give them access to all the data or just parts of it.
{% endhint %}

### Login Label

This text will be shown as the label for the login input on the login page. Default is "Login or email".

### Login Placeholder

This text will be shown as a placeholder for the login field on the login page.

### Login Info Text

This text will be shown on the login page above the login fields.

### Stay Logged In

Choose between "Off", "7 Days" or "30 Days". When set to "Off", the login is valid only per session or tab. If set to 7 or 30 days, the "Stay Logged In" option on the login form is shown. The login then persists browser-wide for the selected duration (on a rolling basis). Logging out ends it.

## Password

### Hint for Unsupported Passwords

This message is displayed when a user sets a password and it does not meet the password requirements.

### Password Requirements

Use regular expressions to define requirements for passwords. To only allow passwords with a length of 8 to 32 characters use ^.{8,32}$ for example.

### Blocking the login after too many failed attempts

If a user tries to login too many times with a wrong password, further login attempts can be temporarily blocked. Attempts from the same IP address will be blocked. Attempts from other IP addresses for the same user account will be blocked.

* **Number of attempts with wrong password:** how many attempts does a user get before their login is blocked? Use the value `0` to disable the automatic blocking.
* **How long to block the login in minutes:** how long to block the users login after the previously set threshold is reached?

## Two-Factor Authentication

Require a second factor at login for local accounts (user types *easydb* and *self-registered*). Available from fylr **6.34.0**; requires a license that includes the two-factor capability.

### **Enabled**

Turns 2FA on for the instance. This only makes it *available*; it is not yet required from anyone.

### Methods

Select at least one of **Email** (a 6-digit one-time code by mail), **Authenticator app (TOTP)** and **Passkey** (WebAuthn; also enables passwordless "Sign in with passkey"). With more than one method selected, users pick one at login.

### Allow Password Grant

Off by default. The OAuth2 password grant cannot present a second factor, so enforced users are refused; turn this on to keep username/password API clients working (their logins then skip the second factor).

2FA is *required* per group via the **Require two-factor authentication** flag in **Rights Management → Groups**. The `system:root` user and users without an email address (when email is the only method) are never challenged.

See [Enabling Two-Factor Authentication](/help/tutorials/for-administrators/enabling-two-factor-authentication.md) for the full setup, the login experience and how to avoid lock-outs.

## Registration

### Allow user registration

Shows a "Sign Up" button when guests / anonymous users access fylr.

{% hint style="info" %}
Please note: this option requires that "Allow Guest Access" is enabled. The user group "Anonymous Users" also needs the system right "Create Users". Also make sure to assign system rights and permissions to the group "Self-registered Users" so they remain access to the system after signing up.
{% endhint %}

### Registration Info Text

This text will be shown on the registration page above the input fields.

### Form

Define which fields should be available for the users who want to sign up. For each field you have the following options:

| OPTION     | DESCRIPTION                           |
| ---------- | ------------------------------------- |
| Show       | Field will be shown and is optional.  |
| Don't Show | Field won't be shown.                 |
| Required   | Field will be shown and is mandatory. |

### Groups

Select groups that should be automatically assigned to a user who registers. Apart from these groups, users who sign up, are automatically assigned to the system group "Self-registered Users".