- Turn on TwoFactorAuthentication system pref - Go to patron account with staff permissions > Manage two-factor authentication