When adding or changing an account's phone number in the front end, TFA method will be set to phone if it was none or email previously.
Steps to replicate:
- Log in and go to user page.
- If TFA method is phone, change it and save the change.
- Optionally log out and back in to verify TFA isn't being sent by phone.
- Edit phone number.
- Log out and back in. You should receive an SMS with a TFA code.
- Check the user page, your TFA method should now be phone. If not, check in incognito.
When adding or changing an account's phone number in the front end, TFA method will be set to phone if it was none or email previously.
Steps to replicate: