http://trashchan2rvdng5zm7346sfxrrkjwvqzolw4lfdyldcsdpmsyj4dkid.onion/faq.html
There are two options included in global management settings that allow admins to increase security by enforcing the use of 2FA for all accounts and/or actions. Force Account 2FA: Forces all accounts to have 2FA, or else the user is redirected to the 2FA setup page. Force Action 2FA: If an account has 2FA enabled, the 2FA code must be input for: changing global settings, changing board settings, resigning from a staff position, deleting accounts, deleting your own account,...